CVE-2010-2464

CVE-2010-2464 describes multiple cross-site scripting (XSS) vulnerabilities found in the RSComments component 1.0.0 Rev 2 for Joomla!. Specifically, attackers can inject malicious web script or HTML through the 'website' and 'name' parameters when submitting data to index.php. This vulnerability has a CVSS score of 4.3, indicating a medium attack complexity and potential for partial integrity impact, as it can be exploited remotely without authentication. While not listed on the KEV catalog, an ExploitDB entry (EDB-13935) confirms the existence of persistent XSS exploit code, though there is no evidence of active exploitation or significant community discussion.