Read the docs
TI-2010-01151 Aliases CVE-2010-1195GHSA-h2h5-q2fr-w439

Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x…

Priority LOW 23CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Cross-site scripting
Confidentiality · integrity · availability
None · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53.5 and 3.x before 3.20100312 allows remote attackers to inject arbitrary web script or HTML via a crafted data:image/svg+xml URI.

Why it matters now

EPSS 0.01704 77th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 69

CPEVersionsRoleVendor
cpe:2.3:a:ikiwiki:ikiwiki:2.0:*:*:*:*:*:*:*2.0Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.1:*:*:*:*:*:*:*2.1Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.2:*:*:*:*:*:*:*2.2Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.3:*:*:*:*:*:*:*2.3Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.4:*:*:*:*:*:*:*2.4Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.5:*:*:*:*:*:*:*2.5Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.10:*:*:*:*:*:*:*2.10Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.11:*:*:*:*:*:*:*2.11Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.12:*:*:*:*:*:*:*2.12Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.13:*:*:*:*:*:*:*2.13Vulnerableikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.2:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.3:*:*:*:*:*:*:* Versions 2.3 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.4:*:*:*:*:*:*:* Versions 2.4 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.5:*:*:*:*:*:*:* Versions 2.5 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.10:*:*:*:*:*:*:* Versions 2.10 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.11:*:*:*:*:*:*:* Versions 2.11 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.12:*:*:*:*:*:*:* Versions 2.12 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.13:*:*:*:*:*:*:* Versions 2.13 Vulnerable ·ikiwiki
Show 59 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:ikiwiki:ikiwiki:2.14:*:*:*:*:*:*:*2.14Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.15:*:*:*:*:*:*:*2.15Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.16:*:*:*:*:*:*:*2.16Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.17:*:*:*:*:*:*:*2.17Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.18:*:*:*:*:*:*:*2.18Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.19:*:*:*:*:*:*:*2.19Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.20:*:*:*:*:*:*:*2.20Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.30:*:*:*:*:*:*:*2.30Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.31:*:*:*:*:*:*:*2.31Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.31.1:*:*:*:*:*:*:*2.31.1Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.31.2:*:*:*:*:*:*:*2.31.2Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.31.3:*:*:*:*:*:*:*2.31.3Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.40:*:*:*:*:*:*:*2.40Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.41:*:*:*:*:*:*:*2.41Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.42:*:*:*:*:*:*:*2.42Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.43:*:*:*:*:*:*:*2.43Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.44:*:*:*:*:*:*:*2.44Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.45:*:*:*:*:*:*:*2.45Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.46:*:*:*:*:*:*:*2.46Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.47:*:*:*:*:*:*:*2.47Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.48:*:*:*:*:*:*:*2.48Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.49:*:*:*:*:*:*:*2.49Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.50:*:*:*:*:*:*:*2.50Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.51:*:*:*:*:*:*:*2.51Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.52:*:*:*:*:*:*:*2.52Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:2.53:*:*:*:*:*:*:*2.53Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.00:*:*:*:*:*:*:*3.00Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.01:*:*:*:*:*:*:*3.01Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.02:*:*:*:*:*:*:*3.02Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.03:*:*:*:*:*:*:*3.03Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.04:*:*:*:*:*:*:*3.04Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.05:*:*:*:*:*:*:*3.05Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.06:*:*:*:*:*:*:*3.06Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.07:*:*:*:*:*:*:*3.07Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.08:*:*:*:*:*:*:*3.08Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.09:*:*:*:*:*:*:*3.09Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.10:*:*:*:*:*:*:*3.10Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.11:*:*:*:*:*:*:*3.11Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.12:*:*:*:*:*:*:*3.12Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.13:*:*:*:*:*:*:*3.13Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.14:*:*:*:*:*:*:*3.14Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.141:*:*:*:*:*:*:*3.141Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.1415:*:*:*:*:*:*:*3.1415Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.14159:*:*:*:*:*:*:*3.14159Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.141592:*:*:*:*:*:*:*3.141592Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.1415926:*:*:*:*:*:*:*3.1415926Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.14159265:*:*:*:*:*:*:*3.14159265Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.20091009:*:*:*:*:*:*:*3.20091009Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.20091017:*:*:*:*:*:*:*3.20091017Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.20091022:*:*:*:*:*:*:*3.20091022Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.20091023:*:*:*:*:*:*:*3.20091023Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.20091031:*:*:*:*:*:*:*3.20091031Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.20091113:*:*:*:*:*:*:*3.20091113Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.20091202:*:*:*:*:*:*:*3.20091202Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.20091218:*:*:*:*:*:*:*3.20091218Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.20100102.3:*:*:*:*:*:*:*3.20100102.3Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.20100122:*:*:*:*:*:*:*3.20100122Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.20100212:*:*:*:*:*:*:*3.20100212Vulnerableikiwiki
cpe:2.3:a:ikiwiki:ikiwiki:3.20100302:*:*:*:*:*:*:*3.20100302Vulnerableikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.14:*:*:*:*:*:*:* Versions 2.14 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.15:*:*:*:*:*:*:* Versions 2.15 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.16:*:*:*:*:*:*:* Versions 2.16 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.17:*:*:*:*:*:*:* Versions 2.17 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.18:*:*:*:*:*:*:* Versions 2.18 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.19:*:*:*:*:*:*:* Versions 2.19 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.20:*:*:*:*:*:*:* Versions 2.20 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.30:*:*:*:*:*:*:* Versions 2.30 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.31:*:*:*:*:*:*:* Versions 2.31 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.31.1:*:*:*:*:*:*:* Versions 2.31.1 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.31.2:*:*:*:*:*:*:* Versions 2.31.2 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.31.3:*:*:*:*:*:*:* Versions 2.31.3 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.40:*:*:*:*:*:*:* Versions 2.40 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.41:*:*:*:*:*:*:* Versions 2.41 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.42:*:*:*:*:*:*:* Versions 2.42 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.43:*:*:*:*:*:*:* Versions 2.43 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.44:*:*:*:*:*:*:* Versions 2.44 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.45:*:*:*:*:*:*:* Versions 2.45 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.46:*:*:*:*:*:*:* Versions 2.46 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.47:*:*:*:*:*:*:* Versions 2.47 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.48:*:*:*:*:*:*:* Versions 2.48 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.49:*:*:*:*:*:*:* Versions 2.49 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.50:*:*:*:*:*:*:* Versions 2.50 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.51:*:*:*:*:*:*:* Versions 2.51 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.52:*:*:*:*:*:*:* Versions 2.52 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:2.53:*:*:*:*:*:*:* Versions 2.53 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.00:*:*:*:*:*:*:* Versions 3.00 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.01:*:*:*:*:*:*:* Versions 3.01 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.02:*:*:*:*:*:*:* Versions 3.02 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.03:*:*:*:*:*:*:* Versions 3.03 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.04:*:*:*:*:*:*:* Versions 3.04 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.05:*:*:*:*:*:*:* Versions 3.05 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.06:*:*:*:*:*:*:* Versions 3.06 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.07:*:*:*:*:*:*:* Versions 3.07 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.08:*:*:*:*:*:*:* Versions 3.08 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.09:*:*:*:*:*:*:* Versions 3.09 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.10:*:*:*:*:*:*:* Versions 3.10 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.11:*:*:*:*:*:*:* Versions 3.11 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.12:*:*:*:*:*:*:* Versions 3.12 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.13:*:*:*:*:*:*:* Versions 3.13 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.14:*:*:*:*:*:*:* Versions 3.14 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.141:*:*:*:*:*:*:* Versions 3.141 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.1415:*:*:*:*:*:*:* Versions 3.1415 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.14159:*:*:*:*:*:*:* Versions 3.14159 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.141592:*:*:*:*:*:*:* Versions 3.141592 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.1415926:*:*:*:*:*:*:* Versions 3.1415926 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.14159265:*:*:*:*:*:*:* Versions 3.14159265 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.20091009:*:*:*:*:*:*:* Versions 3.20091009 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.20091017:*:*:*:*:*:*:* Versions 3.20091017 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.20091022:*:*:*:*:*:*:* Versions 3.20091022 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.20091023:*:*:*:*:*:*:* Versions 3.20091023 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.20091031:*:*:*:*:*:*:* Versions 3.20091031 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.20091113:*:*:*:*:*:*:* Versions 3.20091113 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.20091202:*:*:*:*:*:*:* Versions 3.20091202 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.20091218:*:*:*:*:*:*:* Versions 3.20091218 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.20100102.3:*:*:*:*:*:*:* Versions 3.20100102.3 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.20100122:*:*:*:*:*:*:* Versions 3.20100122 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.20100212:*:*:*:*:*:*:* Versions 3.20100212 Vulnerable ·ikiwiki
  • cpe:2.3:a:ikiwiki:ikiwiki:3.20100302:*:*:*:*:*:*:* Versions 3.20100302 Vulnerable ·ikiwiki

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2010-1195
  2. 2026-10-03 Alias added: GHSA-h2h5-q2fr-w439

References

Advisory 3

  • TI-2017-00331 Authentication bypass via repeated parameters CVSS 3.0CRITICAL 9.8
  • TI-2011-01233 ikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks. CVSS 3.1HIGH 8.2
  • TI-2016-08112 ikiwiki 3.20161219 does not properly check if a revision changes the access permissions… CVSS 3.0HIGH 7.5
  • TI-2019-06647 ikiwiki before 3.20170111.1 and 3.2018x and 3.2019x before 3.20190228 allows SSRF via the… CVSS 3.0HIGH 7.5
  • TI-2008-00155 Plugin/passwordauth.pm (aka the passwordauth plugin) in ikiwiki 1.34 through 2.47 allows… CVSS 2.0MEDIUM 6.8
  • TI-2016-07849 Editing restriction bypass for git revert CVSS 3.0MEDIUM 6.5
See all 17 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences