Description

Multiple cross-site scripting (XSS) vulnerabilities in the XML parser in Drupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allow remote attackers to inject arbitrary web script or HTML via a crafted RSS feed.

Remediation

References

CVE-2006-5475

Related Vulnerabilities

WordPress Plugin AnyVar Cross-Site Scripting (0.1.1)

MongoDb Improper Handling of Exceptional Conditions Vulnerability (CVE-2020-7923)

Zope Web Application Server Other Vulnerability (CVE-2001-1278)

MySQL CVE-2019-2757 Vulnerability (CVE-2019-2757)

MySQL CVE-2016-3614 Vulnerability (CVE-2016-3614)

Severity

Medium

Classification

CVE-2006-5475

Tags

Missing Update Known Vulnerabilities