CVE-2009-3786 Cross-site scripting (XSS) vulnerability in Organic Groups (OG) Vocabulary 5.x before 5.x-1.1 and 6.x before 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTM...
MediumCVSS 4.3
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Organic Groups (OG) Vocabulary 5.x before 5.x-1.1 and 6.x before 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the group title.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| moshe weitzman og vocab | = 5.x-1.0 | No fix listed |
| moshe weitzman og vocab | = 5.x-1.x-dev | No fix listed |
References
- drupal.org patch vendor-advisory
- drupal.org patch vendor-advisory
- drupal.org
- drupal.org
- 59129 vdb-entry
- 59673 vdb-entry
- 37125 third-party-advisory vendor-advisory
- 37290 third-party-advisory
- 36784 patch vdb-entry
- 36929 vdb-entry
- ADV-2009-3000 patch vdb-entry vendor-advisory
- ogvocabulary-title-xss(53902) vdb-entry
- organic-vocabulary-titles-xss(54150) vdb-entry