CVE-2011-4560 Cross-site scripting (XSS) vulnerability in the Petition Node module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors....
LowCVSS 3.5
EPSS 0.89%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the Petition Node module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to signing a petition.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| drupal petition node module | = 6.x-1.1 | No fix listed |
| drupal petition node module | = 6.x-1.1-beta1 | No fix listed |
| drupal petition node module | = 6.x-1.1-beta2 | No fix listed |
| drupal petition node module | = 6.x-1.1-beta3 | No fix listed |
| drupal petition node module | = 6.x-1.1-beta4 | No fix listed |
| drupal petition node module | = 6.x-1.1-beta5 | No fix listed |
| drupal petition node module | = 6.x-1.1-beta6 | No fix listed |
| drupal petition node module | = 6.x-1.1-dev | No fix listed |
| drupal petition node module | = 6.x-1.2 | No fix listed |
| drupal petition node module | = 6.x-1.3 | No fix listed |
| drupal petition node module | = 6.x-1.4 | No fix listed |
References
- drupal.org
- 76094 vdb-entry
- 46333 third-party-advisory vendor-advisory
- 49982 vdb-entry
- drupal-petitionnode-unspecified-xss(70342) vdb-entry