Archive
September 2010
Vulnerabilities first published in this month (UTC), newest first.
1 result · Clear filters · Feed
-
Low —
Drupal cross-site scripting vulnerability via actions feature and trigger module
Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x before 6.18 allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via (1) an action description, (2) an action message, (3) a node, or (4) a taxonomy t…