CVE-2010-4913

CVE-2010-4913 describes a Cross-Site Scripting (XSS) vulnerability in the search feature of ColdGen ColdUserGroup version 1.06, allowing remote attackers to inject malicious web scripts via the Keywords parameter. With a CVSS score of 4.3 (Medium), this vulnerability has a network attack vector and medium attack complexity, potentially leading to information disclosure (C:N/I:P/A:N). While there is no evidence of active exploitation, no Metasploit or Nuclei exploits, and no community discussion, an ExploitDB entry for a blind SQL injection in the same product version exists, though not directly for this XSS. The vulnerability is not on the KEV catalog or Hot List, and its EPSS score is very low.