CVE-2010-2698

CVE-2010-2698 describes multiple cross-site scripting (XSS) vulnerabilities in Sijio Community Software, allowing authenticated users to inject malicious web script or HTML. Specifically, the flaw exists in the title parameter when editing blogs or adding/editing albums. The vulnerability has a CVSS score of 3.5, indicating a medium attack complexity and requiring authentication, with a potential impact of partial integrity compromise. While not listed on the KEV catalog or Hot List, an exploit (EDB-14260) is publicly available, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.