PT-2009-4527 · Drupal · Nodequeue
CVE-2009-2074
·
Publicado
2009-06-16
·
Atualizado
2024-02-14
CVSS v2.0
3.5
Baixa
| Vetor | AV:N/AC:M/Au:S/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Nodequeue versions 5.x before 5.x-2.7
Nodequeue versions 6.x before 6.x-2.2
Description
A cross-site scripting (XSS) issue allows remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML via vocabulary names.
Recommendations
For Nodequeue versions 5.x before 5.x-2.7, update to version 5.x-2.7 or later.
For Nodequeue versions 6.x before 6.x-2.2, update to version 6.x-2.2 or later.
Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Nodequeue