CVE-2010-3462: Cross-site scripting (XSS) vulnerability in backend/plugin/Registration/index.php in Mollify 1.6, 1.6.5.5,...

Security readout for executives and security teams

CVE-2010-3462 is a reflected cross-site scripting issue in Mollify’s registration plugin. If an exposed site uses the vulnerable version, an attacker could craft a link that runs unwanted script in a user’s browser when opened. Exposure is most likely on legacy Mollify deployments that expose backend/plugin/Registration/index.php, especially versions 1.6 or 1.6.5.5. The bundle does not provide reliable CPEs or a complete affected-version list. Prioritize if Mollify is internet-facing or used by privileged users. This is an old legacy-software XSS with public references, but no confirmed active exploitation in the provided sources. Mitigation focus: Inventory all Mollify installations and confirm whether vulnerable versions are present.; Check vendor or maintainer guidance for a fixed or non-affected version.; Restrict public access to the registration plugin if it is not required..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.