CVE-2010-2344: Multiple cross-site scripting (XSS) vulnerabilities in odCMS 1.06, and possibly earlier, allow remote attac...

Security readout for executives and security teams

CVE-2010-2344 is a set of cross-site scripting flaws in odCMS 1.06, and possibly earlier versions. An attacker could cause a vulnerable site to reflect malicious script or HTML through the Page parameter, affecting several public-facing sections. The main business risk is user session, trust, and content integrity exposure on legacy odCMS sites. Exposure is likely limited to organizations still running odCMS 1.06 or older public web deployments. The affected endpoints suggest internet-facing risk if those site sections are reachable and accept the Page parameter. Treat this as a legacy web application cleanup item unless odCMS is business-critical or internet-facing. Prioritize confirmation of exposure first, then replacement or vendor-supported remediation because the bundle does not identify an official patch. Mitigation focus: Inventory public sites for odCMS 1.06 or earlier installations.; Check odCMS or maintainer guidance for fixed versions or official remediation.; Retire, replace, or isolate unsupported odCMS deployments if no maintained fix exists..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.