{"id":"UBUNTU-CVE-2010-1195","details":"Cross-site scripting (XSS) vulnerability in the htmlscrubber component in ikiwiki 2.x before 2.53.5 and 3.x before 3.20100312 allows remote attackers to inject arbitrary web script or HTML via a crafted data:image/svg+xml URI.","modified":"2025-07-16T07:30:39.359021Z","published":"2010-03-31T18:00:00Z","withdrawn":"2025-07-18T16:42:39Z","upstream":["CVE-2010-1195"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2010-1195"},{"type":"REPORT","url":"http://www.debian.org/security/2010/dsa-2020"},{"type":"REPORT","url":"http://ikiwiki.info/security/#index36h2"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2010-1195"}],"affected":[{"package":{"name":"ikiwiki","ecosystem":"Ubuntu:14.04:LTS","purl":"pkg:deb/ubuntu/ikiwiki@3.20130904.1ubuntu1?arch=source&distro=trusty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.20130904.1ubuntu1"}]}],"versions":["3.20130212ubuntu1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"ikiwiki","binary_version":"3.20130904.1ubuntu1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2010/UBUNTU-CVE-2010-1195.json"}}],"schema_version":"1.7.3","severity":[{"type":"Ubuntu","score":"medium"}]}