Description

Cross-site scripting (XSS) vulnerability in the Color module in Drupal 7.x before 7.24 allows remote attackers to inject arbitrary web script or HTML via vectors related to CSS.

Remediation

References

CVE-2013-6388

Related Vulnerabilities

Oracle JRE CVE-2013-5817 Vulnerability (CVE-2013-5817)

WordPress Plugin Party Hall Booking Manager SQL Injection (1.1)

Nginx Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2012-2089)

WordPress Plugin Rise Blocks-A Complete Gutenberg Page Builder Unspecified Vulnerability (1.0.0)

Dotclear Other Vulnerability (CVE-2007-3672)

Severity

Medium

Classification

CVE-2013-6388 CWE-707

Tags

Missing Update Known Vulnerabilities