Unscored CVE-2010-4521 EUVD-2010-4489GHSA-26xj-xw26-4hf7

Cross-site scripting (XSS) vulnerability in the Views module 6.x before 6.x-2.12 for Drupal allows remote attackers to inject arbitrary web…

Published Dec 23, 2010 · Updated Aug 7, 2024 · Assigned by redhat

Description

Cross-site scripting (XSS) vulnerability in the Views module 6.x before 6.x-2.12 for Drupal allows remote attackers to inject arbitrary web script or HTML via a page path.

References

ADV-2011-0011 vdb-entry
FEDORA-2010-18927 vendor-advisory
[oss-security] 20101216 CVE request: Drupal views module CSRF/XSS before 2.11, XSS before 2.12 mailing-list
http://drupal.org/node/999380
[oss-security] 20101221 Re: CVE request: Drupal views module CSRF/XSS before 2.11, XSS before 2.12 mailing-list
FEDORA-2010-19009 vendor-advisory