Description

Cross-site scripting (XSS) vulnerability in the project module (project.module) in Drupal 4.5 and 4.6 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.

Remediation

References

CVE-2006-2260

Related Vulnerabilities

WordPress Plugin WP Dark Mode-Best Dark Mode & Social Sharing for WordPress Cross-Site Scripting (3.0.6)

Envoy Proxy Out-of-bounds Write Vulnerability (CVE-2019-18801)

Apache HTTP Server Improper Encoding or Escaping of Output Vulnerability (CVE-2024-38474)

Oracle HTTP Server Out-of-bounds Read Vulnerability (CVE-2021-4183)

WordPress 'get_edit_post_link()' and 'get_edit_comment_link()' Multiple Eavesdropping Vulnerabilities (0.6.2 - 2.6)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2006-2260