PT-2009-4536

CVE-2009-2083

Publicado

2009-06-16

Atualizado

2024-02-14

Descrição por

CVSS 2.0

3.5

Baixa

MétricasAV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Taxonomy manager versions 5.x before 5.x-1.2

Description A cross-site scripting (XSS) issue exists in the term data detail page of the Taxonomy manager module for Drupal. This allows remote authenticated users with specific privileges to inject arbitrary web script or HTML via the "Parent and related terms" field.

Recommendations For Taxonomy manager versions 5.x before 5.x-1.2, update to version 5.x-1.2 or later to resolve the issue.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Justin Klein Keane

Justin_Kleinkeane

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')