Skip to content
OpenAdvisories

Package · Packagist

drupal/drupal

81 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

81 results · Feed

  • Medium —
    CVE-2008-3218

    Drupal vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x before 6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) free tagging taxonomy terms, which are not properly handled on node preview pages, and (2) un…

    drupal/drupal Packagist