Cross site scripting

2009-06-2718:47:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.0%

JSON

Cross-site scripting (XSS) vulnerability in OpenID 5.x before 5.x-1.2, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
openideq5.120.10
openideq5.120.11
openideq5.x-1.x dev

Name	Operator	Version
openid	eq	5.120.10
openid	eq	5.120.11
openid	eq	5.x-1.x dev

References

osvdb.org/46938

secunia.com/advisories/31027

www.securityfocus.com/bid/30165

drupal.org/node/280592

drupal.org/node/280593