CVE-2010-1996

CVE-2010-1996 describes multiple cross-site scripting (XSS) vulnerabilities in TomatoCMS versions prior to 2.0.5. These flaws allow authenticated users with specific creation privileges to inject malicious web scripts through various parameters when adding polls, categories, or tags. The vulnerability has a low severity CVSS score of 2.1, indicating a network-based attack with high access complexity and partial integrity impact, but no confidentiality or availability impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage surrounding this decade-old vulnerability.