CVE-2010-1712: Multiple cross-site scripting (XSS) vulnerabilities in base/Comments.php in Webmobo WB News 2.3.3 allow rem...

Security readout for executives and security teams

This is a web comment-form XSS issue in Webmobo WB News 2.3.3. An attacker could submit script or HTML through comment fields, potentially affecting users who view the resulting page. The bundle provides no CVSS score and no KEV listing, so urgency depends on whether this legacy software is still exposed. Exposure appears limited to Webmobo WB News 2.3.3 installations, especially sites with public or unauthenticated comment functionality. The source bundle does not identify other affected versions, CPEs, or products. Prioritize validation if this old application is still public-facing. The business risk is user/session compromise through a legacy comment feature, but available evidence does not support emergency treatment absent confirmed exposure. Mitigation focus: Check vendor or archived project guidance for an official fix or upgrade path.; Disable or restrict public comments if the software remains exposed.; Apply output encoding and input validation around comment name and message fields..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.