Description

Cross-site scripting (XSS) vulnerability in the Forum module in Drupal 6.x before 6.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2009-2373

Related Vulnerabilities

WordPress Plugin Import any XML or CSV File to WordPress Pro Arbitrary File Upload (4.1.0)

WordPress Plugin Contact Form 7 Privilege Escalation (5.0.3)

WordPress Plugin Social Like Box and Page by WpDevArt Cross-Site Scripting (0.8.40)

e107 Other Vulnerability (CVE-2006-5786)

Apache HTTP Server Resource Management Errors Vulnerability (CVE-2011-1928)

Severity

Medium

Classification

CVE-2009-2373 CWE-707

Tags

Missing Update Known Vulnerabilities