Описание
Cross-site scripting (XSS) vulnerability in Drupal 8.x before 8.1.10 allows remote attackers to inject arbitrary web script or HTML via vectors involving an HTTP exception.
Пакеты
Пакет | Статус | Версия исправления | Релиз | Тип |
---|---|---|---|---|
drupal7 | not-affected | package |
EPSS
Процентиль: 67%
0.00543
Низкий
Связанные уязвимости
CVSS3: 6.1
ubuntu
больше 8 лет назад
Cross-site scripting (XSS) vulnerability in Drupal 8.x before 8.1.10 allows remote attackers to inject arbitrary web script or HTML via vectors involving an HTTP exception.
CVSS3: 6.1
nvd
больше 8 лет назад
Cross-site scripting (XSS) vulnerability in Drupal 8.x before 8.1.10 allows remote attackers to inject arbitrary web script or HTML via vectors involving an HTTP exception.
EPSS
Процентиль: 67%
0.00543
Низкий