exploitDog

CVE-2009-3648

Опубликовано: 02 окт. 2009

Источник: redhat

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Service Links 6.x-1.0, a module for Drupal, allows remote authenticated users, with 'administer content types' permissions, to inject arbitrary web script or HTML via unspecified vectors when displaying content type names.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-79

https://bugzilla.redhat.com/show_bug.cgi?id=528200drupal-service_links: xss vulnerability

EPSS

Процентиль: 35%

0.00142

Низкий

Связанные уязвимости

CVE-2009-3648

nvd

почти 16 лет назад

Cross-site scripting (XSS) vulnerability in Service Links 6.x-1.0, a module for Drupal, allows remote authenticated users, with 'administer content types' permissions, to inject arbitrary web script or HTML via unspecified vectors when displaying content type names.

GHSA-jqgm-6w4j-7734

github

больше 3 лет назад

Cross-site scripting (XSS) vulnerability in Service Links 6.x-1.0, a module for Drupal, allows remote authenticated users, with 'administer content types' permissions, to inject arbitrary web script or HTML via unspecified vectors when displaying content type names.

EPSS

Процентиль: 35%

0.00142

Низкий