Cross site scripting

2012-09-0921:55:00

PRIOn knowledge base

www.prio-n.com

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.3%

JSON

Cross-site scripting (XSS) vulnerability in the Cool Aid module before 6.x-1.9 for Drupal allows remote authenticated users with the administer coolaid permission to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
cool_aideq<= 6.x-1.8
cool_aideq6.120.10
cool_aideq6.120.11
cool_aideq6.120.12
cool_aideq6.120.13
cool_aideq6.120.14
cool_aideq6.120.16
cool_aideq6.120.17
cool_aideq6.x-1.x dev

Name	Operator	Version
cool_aid	eq	<= 6.x-1.8
cool_aid	eq	6.120.10
cool_aid	eq	6.120.11
cool_aid	eq	6.120.12
cool_aid	eq	6.120.13
cool_aid	eq	6.120.14
cool_aid	eq	6.120.16
cool_aid	eq	6.120.17
cool_aid	eq	6.x-1.x dev