Skip to content
OpenAdvisories
Unscored CVE-2008-3095 EUVD-2008-3085GHSA-3rq3-f864-789r

Cross-site scripting (XSS) vulnerability in the Organic Groups (OG) module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, a module for Drup…

Published Jul 9, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Category: Web / CMS

Description

Cross-site scripting (XSS) vulnerability in the Organic Groups (OG) module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, a module for Drupal, allows remote authenticated users, with group owner permissions, to inject arbitrary web script or HTML via unspecified vectors.

References