CVE-2010-1712: Webmobo Wbnews

Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in base/Comments.php in Webmobo WB News 2.3.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name and possibly (2) message parameters. NOTE: some of these details are obtained from third party information.

Affected products

• Webmobo Wbnews: version 2.3.3 only

Published 2010-05-04. Last modified 2026-06-16.