CVE-2010-3425: SmarterTools Smarterstats

Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in UserControls/Popups/frmHelp.aspx in SmarterStats 5.3, 5.3.3819, and possibly other 5.3 versions, allows remote attackers to inject arbitrary web script or HTML via the url parameter.

Affected products

• SmarterTools Smarterstats: version 5.3 only; version 5.3.3819 only

Published 2010-09-16. Last modified 2026-06-16.