CVE-2010-4366: Multiple cross-site scripting (XSS) vulnerabilities in forum_new_topic.php in Chameleon Social Networking a...

Security readout for executives and security teams

This CVE describes cross-site scripting in a forum topic creation page for Chameleon Social Networking. An attacker could put script or HTML into forum topic title or description fields, causing unsafe content to appear to other users. The source bundle does not provide version ranges, CVSS, vendor patch details, or evidence of active exploitation. Exposure is likely limited to legacy Chameleon Social Networking installations that still expose forum_new_topic.php and allow users to create forum topics. The bundle lists affected product data as n/a, so version-specific exposure cannot be determined from these sources alone. Treat this as a legacy web-application exposure item. It is not supported by current active-exploitation evidence, but public exploit references and user-facing XSS risk justify timely inventory, ownership confirmation, and remediation planning where the product is still deployed. Mitigation focus: Inventory any Chameleon Social Networking deployments and exposed forum_new_topic.php routes.; Check vendor or maintainer guidance for patches, supported versions, or migration advice.; Restrict forum topic creation to trusted users if business operations allow..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.