CVE-2010-4209: yahoo yui Cross-site Scripting

EPSS trend

Probability

4.92%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

+0.65 pp

From 4.27% on 19-09-2026

19-09-202619-10-2026

EPSS score

4.92%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

16 links

lists.fedoraproject.org/pipermail/package-announce/2010-November/050813.htmlVendor AdvisoryX Refsource FEDORA
yuilibrary.com/support/2.8.2/X Refsource CONFIRMPatchVendor Advisory
www.vupen.com/english/advisories/2010/2878VDB EntryX Refsource VUPENVendor Advisory
www.securityfocus.com/archive/1/514622Mailing ListX Refsource BUGTRAQ
www.bugzilla.org/security/3.2.8/X Refsource CONFIRM
lists.fedoraproject.org/pipermail/package-announce/2010-November/050820.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/41955Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securitytracker.com/id?1024683VDB EntryX Refsource SECTRACK
www.securityfocus.com/bid/44420VDB EntryX Refsource BID
lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.htmlVendor AdvisoryX Refsource SUSE

Show all 16 references

lists.fedoraproject.org/pipermail/package-announce/2010-November/050830.htmlVendor AdvisoryX Refsource FEDORA
www.vupen.com/english/advisories/2010/2975VDB EntryX Refsource VUPEN
www.openwall.com/lists/oss-security/2010/11/07/1Mailing ListX Refsource MLIST
secunia.com/advisories/42271Third Party AdvisoryX Refsource SECUNIA
ubuntu.com/security/CVE-2010-4209REPORT
www.cve.org/CVERecord?id=CVE-2010-4209REPORT

Related vulnerabilities

CVE-2013-4942moodlemoodle+31.19%13y ago26-07-2013 22:00Cross-site scripting (XSS) vulnerability in flashuploader.swf in the Uploader component in Yahoo! YUI 3.5.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML via a crafted string in a URL.CVE-2013-4939moodlemoodle+21.49%13y ago26-07-2013 22:00Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.0.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML via a crafted string in a URL.CVE-2013-4941moodlemoodle+31.19%13y ago26-07-2013 22:00Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 3.2.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML via a crafted string in a URL.CVE-2013-4940moodlemoodle+31.49%13y ago26-07-2013 22:00Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML via a crafted string in a URL. NOTE: this vulnerability exists because of a CVE-2013-4939 regression.CVE-2013-6780yahooyui2.42%12y ago13-11-2013 15:00Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via the allowedDomain parameter.CVE-2012-5882ubuntuyui+12.40%13y ago16-11-2012 11:00Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader.swf, a similar issue to CVE-2010-4208.

All vulnerabilities inyui

CVE-2010-4209: yahoo yui Cross-site Scripting

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References