CVE-2010-2250

score

<0.1

cvss

6.1

epss

1.0%

published

2019-11-07

kev added

—

first seen

2026-10-21

Drupal 5.x and 6.x before 6.16 contain a reflected cross-site scripting caused by user-supplied value in output during site installation, letting attackers execute malicious scripts in the victim's browser, exploit requires attacker to craft a malicious URL.