Description

Cross-site scripting (XSS) vulnerability in the Devel module before 5.x-0.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via a site variable, related to lack of escaping of the variable table.

Remediation

References

CVE-2008-0276

Related Vulnerabilities

Dolibarr Improper Privilege Management Vulnerability (CVE-2022-43138)

Joomla Improper Authentication Vulnerability (CVE-2022-23795)

Mailman Other Vulnerability (CVE-2003-0038)

WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.34)

WordPress Plugin JW Player for Flash & HTML5 Video Cross-Site Request Forgery (2.1.3)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2008-0276