CVE-2009-2078

2022-10-0316:24:08

mitre

www.cve.org

cve-2009-2078

cross-site scripting

booktree module

drupal

remote attackers

arbitrary web script

html injection

node title

node body

tree root page

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.0%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Booktree 5.x before 5.x-7.3 and 6.x before 6.x-1.1, a module for Drupal, allow remote attackers to inject arbitrary web script or HTML via the (1) node title and (2) node body in a tree root page.