Description
Drupal 5.x before 5.13 and 6.x before 6.7 does not delete all related content when an input format is deleted, which prevents the content from being properly filtered and allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.
Remediation
References
Related Vulnerabilities
WordPress Plugin Prismatic Multiple Cross-Site Scripting Vulnerabilities (2.7)
TYPO3 Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-7081)
Django DEPRECATED: Code Vulnerability (CVE-2015-0222)
phpMyFAQ Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-15733)
Jenkins Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-27900)