Cross site scripting

2010-03-2517:30:00

PRIOn knowledge base

www.prio-n.com

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.9%

JSON

Cross-site scripting (XSS) vulnerability in the Control Panel module 5.x through 5.x-1.5 and 6.x through 6.x-1.2 for Drupal allows remote authenticated users, with “administer blocks” privileges, to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
controlpaneleq5.120.11
controlpaneleq5.120.12
controlpaneleq5.120.13
controlpaneleq5.120.14
controlpaneleq5.120.15
controlpaneleq6.0.0-x1.0-beta1
controlpaneleq6.0.0-x1.0-beta2
controlpaneleq6.120.11
controlpaneleq6.120.12

Name	Operator	Version
controlpanel	eq	5.120.11
controlpanel	eq	5.120.12
controlpanel	eq	5.120.13
controlpanel	eq	5.120.14
controlpanel	eq	5.120.15
controlpanel	eq	6.0.0-x1.0-beta1
controlpanel	eq	6.0.0-x1.0-beta2
controlpanel	eq	6.120.11
controlpanel	eq	6.120.12