Unscored CVE-2009-0603 EUVD-2009-0606GHSA-3v8f-pqw4-37vx

Cross-site scripting (XSS) vulnerability in index.php in the Link module 5.x-2.5 for Drupal 5.10 allows remote authenticated users, with "a…

Published Feb 16, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in index.php in the Link module 5.x-2.5 for Drupal 5.10 allows remote authenticated users, with "administer content types" privileges, to inject arbitrary web script or HTML via the description parameter (aka the Help field). NOTE: some of these details are obtained from third party information.

References

51780 vdb-entry
33835 third-party-advisory
33642 vdb-entry
20090205 Drupal Link Module XSS Vulnerability mailing-list
link-description-xss(48553) vdb-entry