Skip to content
OpenAdvisories

Package · Packagist

drupal/drupal

81 known vulnerabilities.

1 result · Clear filters · Feed

  • Low —

    Drupal cross-site scripting vulnerability via actions feature and trigger module

    Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x before 6.18 allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via (1) an action description, (2) an action message, (3) a node, or (4) a taxonomy t…