Vulnerabilities

TI-2009-01023 CVE-2009-1069 · GHSA-3jjw-w3h4-qj5p

Multiple cross-site scripting (XSS) vulnerabilities in the node edit form feature in…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in the node edit form feature in Drupal Content Construction Kit (CCK) 6.x before 6.x-2.2, a module for Drupal, allow remote attackers to inject arbitrary web script or…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01241 Published 2009-03-24 No fix listed CWE-79

TI-2008-05922 CVE-2008-6229 · GHSA-f4f6-f3qm-8mf5

Cross-site scripting (XSS) vulnerability in the administrative interface in Drupal…

LOW 19

Cross-site scripting (XSS) vulnerability in the administrative interface in Drupal Content Construction Kit (CCK) 5.x before 5.x-1.10 and 6.x before 6.x-2.0, a module for Drupal, allows remote authenticated users with "a…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01019 Published 2009-02-20 No fix listed CWE-79

TI-2007-04223 CVE-2007-4363 · GHSA-386q-5vfw-9f3x

Multiple cross-site scripting (XSS) vulnerabilities in the nodereference module in Drupal…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in the nodereference module in Drupal Content Construction Kit (CCK) before 4.7.x-1.6, and 5.x before 5.x-1.6 ,allow remote attackers to inject arbitrary web script or…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02275 Published 2007-08-15 No fix listed

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in the node edit form feature in…

Cross-site scripting (XSS) vulnerability in the administrative interface in Drupal…

Multiple cross-site scripting (XSS) vulnerabilities in the nodereference module in Drupal…