CVE-2010-2849: Nusoftware Nubuilder

Medium severity, CVSS 4.3. EPSS: 2.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in productionnu2/nuedit.php in nuBuilder 10.04.20, and possibly other versions before 10.07.12, allows remote attackers to inject arbitrary web script or HTML via the f parameter.

Affected products

• Nusoftware Nubuilder: up to and including 10.04.20; version 09.06.10 only; version 09.06.26 only; version 09.07.24 only; version 09.08.20 only; version 09.09.23 only

Published 2010-07-25. Last modified 2026-06-16.