CVE-2008-3095 Cross-site scripting (XSS) vulnerability in the Organic Groups (OG) module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, a module for Drupal, allows remote authenticated users, with group owner permi...
LowCVSS 3.5
EPSS 0.84%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the Organic Groups (OG) module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, a module for Drupal, allows remote authenticated users, with group owner permissions, to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| drupal organic groups module | = 5 | No fix listed |
| drupal organic groups module | = 6 | No fix listed |
References
- drupal.org
- 30928 third-party-advisory vendor-advisory
- 30070 vdb-entry
- organic-groups-unspecified-xss(43572) vdb-entry