Description

Multiple cross-site scripting (XSS) vulnerabilities in Drupal before 4.6.11, and 4.7 before 4.7.5, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in the (1) filter and (2) system modules. NOTE: some of these details are obtained from third party information.

Remediation

References

CVE-2007-0136

Related Vulnerabilities

SharePoint Heap-based Buffer Overflow Vulnerability (CVE-2026-45475)

WordPress Plugin Ibtana-Ecommerce Product Addons Cross-Site Scripting (0.2.3)

Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-34468)

Apache Traffic Server CVE-2023-30631 Vulnerability (CVE-2023-30631)

WordPress Plugin Spider Calendar Cross-Site Scripting and SQL Injection Vulnerabilities (1.0.1)

Severity

Medium

Classification

CVE-2007-0136 CWE-707

Tags

Missing Update Known Vulnerabilities