CVE-2010-3462: Mollify

Medium severity, CVSS 4.3. EPSS: 3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in backend/plugin/Registration/index.php in Mollify 1.6, 1.6.5.5, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the confirm parameter. NOTE: some of these details are obtained from third party information.

Affected products

• Mollify Mollify: version 1.6 only; version 1.6.5.5 only

Published 2010-09-17. Last modified 2026-06-16.