{ "schema_version": "1.4.0", "id": "GHSA-jw6v-x4f2-q3wh", "modified": "2022-05-17T05:17:23Z", "published": "2022-05-17T05:17:23Z", "aliases": [ "CVE-2010-4901" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in char_map.php in MySource Matrix 3.28.3 allow remote attackers to inject arbitrary web script or HTML via the (1) height or (2) width parameter.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-4901" }, { "type": "WEB", "url": "http://osvdb.org/67838" }, { "type": "WEB", "url": "http://secunia.com/advisories/41295" }, { "type": "WEB", "url": "http://securityreason.com/securityalert/8439" }, { "type": "WEB", "url": "http://www.packetstormsecurity.org/1009-advisories/ZSL-2010-4962.txt" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/43020" }, { "type": "WEB", "url": "http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4962.php" } ], "database_specific": { "cwe_ids": [ "CWE-79" ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2011-10-08T10:55:00Z" } }