CVE-2010-4521

MEDIUM 4.3CVE-2010-4521 · Published 23/12/2010 · updated 16/06/2026

In short

CVE-2010-4521 is a MEDIUM (CVSS 4.3) vulnerability affecting views (earl miles).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
views earl_miles	`= 6.x-2.0= 6.x-2.1= 6.x-2.10= 6.x-2.11= 6.x-2.2= 6.x-2.3= 6.x-2.4= 6.x-2.5= 6.x-2.6= 6.x-2.7= 6.x-2.8= 6.x-2.9= 6.x-2.x= 6.x-3.0= 6.x-3.x`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the Views module 6.x before 6.x-2.12 for Drupal allows remote attackers to inject arbitrary web script or HTML via a page path.

References

drupal.org/node/999380 · Patch
lists.fedoraproject.org/pipermail/package-announce/2011-January/052802.html
lists.fedoraproject.org/pipermail/package-announce/2011-January/052814.html
openwall.com/lists/oss-security/2010/12/16/7 · Patch
openwall.com/lists/oss-security/2010/12/22/1 · Patch
vupen.com/english/advisories/2011/0011

More vulnerabilities in views

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free