CVE-2010-1274: Cross-site scripting (XSS) vulnerability in Emweb Wt before 3.1.1 allows remote attackers to inject arbitra...

Security readout for executives and security teams

This is an older cross-site scripting issue in Emweb Wt before 3.1.1. A vulnerable application could place URL-derived content into a redirect response in a way that lets an attacker inject script or HTML. Business impact depends on whether legacy Wt-based web applications are still exposed. Likely exposure is limited to web applications built with Emweb Wt before 3.1.1, especially where redirect flows include URL-derived content. Organizations without Wt or with modern Wt versions are unlikely to be affected. Handle as a targeted legacy exposure check, not an emergency by itself. Prioritize if any public, customer-facing, or login-adjacent application still uses Emweb Wt before 3.1.1. Mitigation focus: Inventory applications and dependencies for Emweb Wt before 3.1.1.; Upgrade affected Wt deployments to 3.1.1 or later where supported.; Check Emweb release notes and vendor guidance before remediation..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.