Description

Cross-site scripting (XSS) vulnerability in the taxonomy module in Drupal 4.6.8 and 4.7.2 allows remote attackers to inject arbitrary web script or HTML via inputs that are not properly validated when the page title is output, possibly involving the $names variable.

Remediation

References

CVE-2006-2833

Related Vulnerabilities

WordPress Plugin Amministrazione Trasparente Cross-Site Request Forgery (7.1)

Python Unchecked Return Value Vulnerability (CVE-2021-4189)

Envoy Proxy Improper Authentication Vulnerability (CVE-2021-21378)

Drupal Core 4.6.x Denial of Service (4.6.0 - 4.6.10)

WordPress Plugin Backup, Restore and Migrate WordPress Sites With the XCloner Cross-Site Request Forgery (3.1.0)

Severity

Low

Classification

CVE-2006-2833

Tags

Missing Update Known Vulnerabilities