CVE-2010-1916

CVE-2010-1916 describes a critical access restriction bypass vulnerability in the Xinha WYSIWYG editor, specifically versions 0.96 Beta 2 and earlier, as well as Serendipity 1.5.2 and earlier. Attackers can manipulate dynamic configuration parameters to modify arbitrary plugin settings, potentially leading to arbitrary file uploads and execution, particularly through the ImageManager plugin. With a CVSS score of 7.5, this vulnerability is considered highly severe, allowing unauthenticated attackers to achieve partial confidentiality, integrity, and availability impacts with low attack complexity. Despite its age and severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.