CVE-2008-1428 Multiple cross-site scripting (XSS) vulnerabilities in the Ubercart 5.x before 5.x-1.0-beta7 module for Drupal allow remote attackers to inject arbitrary web script or HTML via a text attribute value....
MediumCVSS 4.3
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Ubercart 5.x before 5.x-1.0-beta7 module for Drupal allow remote attackers to inject arbitrary web script or HTML via a text attribute value for a product.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| drupal ubercart module | <= 5-1.0 | No fix listed |
References
- drupal.org patch
- ADV-2008-0867 vdb-entry
- ubercart-attribute-xss(41184) vdb-entry