CVE-2008-1978 Cross-site scripting (XSS) vulnerability in the Ubercart 5.x before 5.x-1.0 rc3 module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via node titles related to un...
LowCVSS 3.5
EPSS 0.87%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the Ubercart 5.x before 5.x-1.0 rc3 module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via node titles related to unspecified product features, a different vector than CVE-2008-1428.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| drupal ubercart module | <= 5-1.0 | No fix listed |
References
- drupal.org
- 29950 third-party-advisory vendor-advisory
- 28914 patch vdb-entry
- ADV-2008-1351 vdb-entry
- ubercart-module-xss(41975) vdb-entry