Cross site scripting

2009-04-2014:30:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.9%

JSON

Cross-site scripting (XSS) vulnerability in the Localization client module 5.x before 5.x-1.2 and 6.x before 6.x-1.7, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via input to the translation functionality.

CPENameOperatorVersion
localization_clienteq5.120.10
localization_clienteq5.120.11
localization_clienteq5.x-1.xdev
localization_clienteq6.120.10
localization_clienteq6.120.11
localization_clienteq6.120.12
localization_clienteq6.120.13
localization_clienteq6.120.14
localization_clienteq6.120.15
localization_clienteq6.120.16

Name	Operator	Version
localization_client	eq	5.120.10
localization_client	eq	5.120.11
localization_client	eq	5.x-1.xdev
localization_client	eq	6.120.10
localization_client	eq	6.120.11
localization_client	eq	6.120.12
localization_client	eq	6.120.13
localization_client	eq	6.120.14
localization_client	eq	6.120.15
localization_client	eq	6.120.16

Rows per page:

1-10 of 111

References

osvdb.org/53703

secunia.com/advisories/34718

www.securityfocus.com/bid/34546

www.vupen.com/english/advisories/2009/1060

drupal.org/node/434682