Unscored CVE-2010-1382 EUVD-2010-1410GHSA-77j4-5485-vwcx

Cross-site scripting (XSS) vulnerability in Wiki Server in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote authenticated users…

Published Jun 17, 2010 · Updated Sep 17, 2024 · Assigned by apple

Description

Cross-site scripting (XSS) vulnerability in Wiki Server in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote authenticated users to inject arbitrary web script or HTML via crafted Wiki content, related to lack of a charset field.

References

APPLE-SA-2010-06-15-1 vendor-advisory
ADV-2010-1481 vdb-entry
40871 vdb-entry
1024103 vdb-entry
http://support.apple.com/kb/HT4188
40220 third-party-advisory