Description

Cross-site scripting (XSS) vulnerability in the Archive 5.x before 5.x-1.8 module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2008-0462

Related Vulnerabilities

WordPress Plugin cformsII HTML Injection (15.0.1)

MySQL CVE-2020-2924 Vulnerability (CVE-2020-2924)

Envoy Proxy Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-29492)

WordPress Plugin Easy Digital Downloads-Simple eCommerce for Selling Digital Files Security Bypass (3.1.1.4.1)

WordPress Plugin Blog social sharing component Cross-Site Request Forgery (1.4.5)

Severity

Medium

Classification

CVE-2008-0462 CWE-707

Tags

Missing Update Known Vulnerabilities