CVE-2013-4499

2014-02-1419:00:00

redhat

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.0%

JSON

Cross-site scripting (XSS) vulnerability in the Bean module 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via the bean title.

References

drupal.org/node/2118867

drupal.org/node/2118873

exchange.xforce.ibmcloud.com/vulnerabilities/88278