Skip to content
OpenAdvisories
Unscored CVE-2009-1342 EUVD-2009-1340GHSA-73jc-8vc2-x644

Cross-site scripting (XSS) vulnerability in the CCK comment reference module 6.x before 6.x-1.2, a module for Drupal, allows remote attacke…

Published Apr 20, 2009 · Updated Sep 16, 2024 · Assigned by mitre

Category: Web / CMS

Description

Cross-site scripting (XSS) vulnerability in the CCK comment reference module 6.x before 6.x-1.2, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via certain comment titles associated with a node edit form.

References