Description

Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.12 and 6.x before 6.6 allows remote authenticated users with create book content or edit node book hierarchy permissions to inject arbitrary web script or HTML via the book page title.

Remediation

References

CVE-2008-6170

Related Vulnerabilities

WordPress Plugin Media from FTP Cross-Site Scripting (9.89)

WordPress Plugin DB Toolkit 'uploadify.php' Arbitrary File Upload (0.1.10)

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-38888)

WordPress Plugin eShop Multiple Cross-Site Scripting Vulnerabilities (6.2.8)

Oracle Database Server Uncontrolled Resource Consumption Vulnerability (CVE-2024-21126)

Severity

Low

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2008-6170