CVE-2010-1995

CVE-2010-1995 describes multiple cross-site scripting (XSS) vulnerabilities in TomatoCMS before version 2.0.5. Specifically, authenticated users with "Add new article" privileges can inject malicious web script or HTML through the title, subTitle, and author parameters when adding an article. The vulnerability has a low CVSS score of 2.1, indicating a network-based attack with high attack complexity, requiring user authentication, and resulting in only partial integrity impact. Its EPSS score is very low, suggesting a minimal likelihood of exploitation. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Furthermore, the CVE has received no community discussion or media coverage, indicating a lack of widespread attention or exploitation.