CVE-2010-2250

2019-11-0717:49:32

redhat

www.cve.org

0.002 Low

EPSS

Percentile

56.7%

JSON

Drupal 5.x and 6.x before 6.16 uses a user-supplied value in output during site installation which could allow an attacker to craft a URL and perform a cross-site scripting attack.

CNA Affected

[
  {
    "product": "drupal6",
    "vendor": "drupal6",
    "versions": [
      {
        "status": "affected",
        "version": "6.x before version 6.16"
      }
    ]
  }
]