Cross-site Scripting Vulnerability in HP Palm webOS Contacts Application
CVE-2010-4109

Currently unrated

Key Information:

Vendor: HP
Status: Palm Webos
Vendor: CVE Published:; 8 December 2010

What is CVE-2010-4109?

A cross-site scripting (XSS) vulnerability exists in the Contacts Application of HP Palm webOS prior to version 2.0. This flaw enables remote attackers to inject arbitrary web scripts or HTML into the application through a specially crafted vCard file. If exploited, this vulnerability could allow attackers to execute malicious scripts in the context of the user's session, potentially compromising user data or interactions with the system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch