Description

Cross-site scripting (XSS) vulnerability in the Forum module in Drupal 6.x before 6.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2009-2373

Related Vulnerabilities

WordPress 5.8.x Multiple Vulnerabilities (5.8 - 5.8.4)

WordPress Improper Input Validation Vulnerability (CVE-2008-4106)

PHP Use of Externally-Controlled Format String Vulnerability (CVE-2011-1153)

WordPress Plugin WP Mailster Cross-Site Scripting (1.5.4.0)

ATutor Incorrect Authorization Vulnerability (CVE-2019-16114)

Severity

Medium

Classification

CVE-2009-2373 CWE-707

Tags

Missing Update Known Vulnerabilities