Description

Multiple cross-site scripting (XSS) vulnerabilities in Drupal before 4.6.11, and 4.7 before 4.7.5, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in the (1) filter and (2) system modules. NOTE: some of these details are obtained from third party information.

Remediation

References

CVE-2007-0136

Related Vulnerabilities

WordPress Plugin WPGlobus-Multilingual Everything! Multiple Vulnerabilities (1.9.6)

PostgreSQL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-25695)

WordPress Plugin Malware Scanner Unspecified Vulnerability (4.7.3)

WordPress Plugin Goolytics-Simple Google Analytics Cross-Site Scripting (1.1.1)

WordPress Plugin WP Membership Multiple Vulnerabilities (1.2.3)

Severity

Medium

Classification

CVE-2007-0136 CWE-707

Tags

Missing Update Known Vulnerabilities