PT-2010-3623 · Drupal · Drupal Wordfilter Module
CVE-2010-2002
·
Publicado
2010-05-20
·
Atualizado
2010-05-21
CVSS v2.0
2.1
Baixa
| Vetor | AV:N/AC:H/Au:S/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Drupal Wordfilter module versions 5.x before 5.x-1.1
Drupal Wordfilter module versions 6.x before 6.x-1.1
Description
A cross-site scripting (XSS) issue exists, allowing remote authenticated users with "administer words filtered" privileges to inject arbitrary web script or HTML via the word list.
Recommendations
For Drupal Wordfilter module version 5.x, update to version 5.x-1.1 or later.
For Drupal Wordfilter module version 6.x, update to version 6.x-1.1 or later.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Drupal Wordfilter Module