CVE-2010-4901: Squiz Mysource Matrix

Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in char_map.php in MySource Matrix 3.28.3 allow remote attackers to inject arbitrary web script or HTML via the (1) height or (2) width parameter.

Affected products

• Squiz Mysource Matrix: version 3.28.3 only

Published 2011-10-08. Last modified 2026-06-16.