CVE-2010-5316: Basic-CMS Sweetrice

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to inject arbitrary web script or HTML via a top_height cookie.

Affected products

Published 2015-01-03. Last modified 2026-06-16.