← back
CVE-2010-2615

CVE-2010-2615

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 1.5%
from disclosure to weapon11 days
Published on NVDJul 1
1st PoC+11d
exploitation probability
1.5%top 29% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Multiple cross-site scripting (XSS) vulnerabilities in admin/admin.php in Grafik CMS 1.1.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) page_menu and (2) description parameters in an edit_page action.
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.