Unscored CVE-2009-3488 EUVD-2009-3470GHSA-7p6w-2mrq-wqmv

Cross-site scripting (XSS) vulnerability in the Bibliography (aka Biblio) module 6.x-1.6 for Drupal allows remote authenticated users, with…

Published Sep 30, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the Bibliography (aka Biblio) module 6.x-1.6 for Drupal allows remote authenticated users, with certain content-creation privileges, to inject arbitrary web script or HTML via the Title field, probably a different vulnerability than CVE-2009-3479.

References

36521 vdb-entry
36834 third-party-advisory
bibliography-title-xss(53483) vdb-entry
20090925 Drupal Bibliography 6.x-1.6 XSS Vuln mailing-list