PT-2014-4256
CVE-2014-1611
·
تاريخ النشر
2014-01-30
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Drupal Anonymous Posting module versions 7.x-1.2 through 7.x-1.3
Description
A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via the
contact name field.Recommendations
For versions 7.x-1.2 and 7.x-1.3, consider disabling the Anonymous Posting module until a patch is available. Restrict access to the contact name field to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾