Lucene search
HistoryNov 28, 2011 - 9:55 p.m.
CVE-2011-4560
drupal
petition node
xss
vulnerability
security
nvd
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
5.4 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
47.8%
Cross-site scripting (XSS) vulnerability in the Petition Node module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to signing a petition.
Affected configurations
Node
drupalpetition_node_moduleMatch6.x-1.1
ORdrupalpetition_node_moduleMatch6.x-1.1beta1
ORdrupalpetition_node_moduleMatch6.x-1.1beta2
ORdrupalpetition_node_moduleMatch6.x-1.1beta3
ORdrupalpetition_node_moduleMatch6.x-1.1beta4
ORdrupalpetition_node_moduleMatch6.x-1.1beta5
ORdrupalpetition_node_moduleMatch6.x-1.1beta6
ORdrupalpetition_node_moduleMatch6.x-1.1dev
ORdrupalpetition_node_moduleMatch6.x-1.2
ORdrupalpetition_node_moduleMatch6.x-1.3
ORdrupalpetition_node_moduleMatch6.x-1.4
drupaldrupal
Related
nvd
nvd
CVE-2011-4560
2011-11-28 21:55:08
prion
prion
Cross site scripting
2011-11-28 21:55:00
cvelist
cvelist
CVE-2011-4560
2011-11-28 21:00:00
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
5.4 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
47.8%
Related for CVE-2011-4560