Cross site scripting

2012-09-2000:55:00

PRIOn knowledge base

www.prio-n.com

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.2%

JSON

Cross-site scripting (XSS) vulnerability in vud_term.module in the Vote Up/Down module 6.x-2.x before 6.x-2.8 and 6.x-3.x before 6.x-3.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via taxonomy terms.

CPENameOperatorVersion
vote_up_downeq6.120.20
vote_up_downeq6.x-2.0 beta2
vote_up_downeq6.x-2.0 rc1
vote_up_downeq6.x-2.0 beta1
vote_up_downeq6.120.21
vote_up_downeq6.120.22
vote_up_downeq6.120.23
vote_up_downeq6.120.24
vote_up_downeq6.120.25
vote_up_downeq6.120.26

Name	Operator	Version
vote_up_down	eq	6.120.20
vote_up_down	eq	6.x-2.0 beta2
vote_up_down	eq	6.x-2.0 rc1
vote_up_down	eq	6.x-2.0 beta1
vote_up_down	eq	6.120.21
vote_up_down	eq	6.120.22
vote_up_down	eq	6.120.23
vote_up_down	eq	6.120.24
vote_up_down	eq	6.120.25
vote_up_down	eq	6.120.26