Description

Cross-site scripting (XSS) vulnerability in the Forum module in Drupal 6.x before 6.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2009-2373

Related Vulnerabilities

WordPress URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2018-10101)

WordPress Plugin Fitness Trainer-Training Membership Cross-Site Scripting (1.0.8)

MySQL CVE-2023-21982 Vulnerability (CVE-2023-21982)

Drupal Core 5.x Cross-Site Request Forgery (5.0 - 5.2)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-28979)

Severity

Medium

Classification

CVE-2009-2373 CWE-707

Tags

Missing Update Known Vulnerabilities