Description
Multiple cross-site scripting (XSS) vulnerabilities in the Views module 7.x-3.x before 7.x-3.6 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via certain view configuration fields.
References
- 51540 third-party-advisory
- http://packetstormsecurity.com/files/120892/Drupal-Views-7.x-Cross-Site-Scripting.html
- http://drupal.org/node/1948358
- 91576 vdb-entry
- [oss-security] 20130325 Re: CVE Request -- drupal7-views : SA-CONTRIB-2013-035 - Views - Cross Site Scripting (XSS) mailing-list
- 20130320 [Security-news] SA-CONTRIB-2013-035 - Views - Cross Site Scripting (XSS) mailing-list
- http://drupalcode.org/project/views.git/commitdiff/ddf8181bd13f69ffbeeee14ae72168418785d7ac
- [oss-security] 20130322 Re: CVE Request -- drupal7-views : SA-CONTRIB-2013-035 - Views - Cross Site Scripting (XSS) mailing-list
- 58621 vdb-entry
- http://drupal.org/node/1948354