Cross site scripting

2012-09-1919:55:00

PRIOn knowledge base

www.prio-n.com

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.8%

JSON

Cross-site scripting (XSS) vulnerability in the Submenu Tree module before 6.x-1.5 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
submenu_treeeq<= 6.x-1.4
submenu_treeeq5.120.1
submenu_treeeq5.120.2
submenu_treeeq5.120.3
submenu_treeeq5.120.4
submenu_treeeq5.120.10
submenu_treeeq6.120.10
submenu_treeeq6.120.11
submenu_treeeq6.120.12
submenu_treeeq6.120.13

Name	Operator	Version
submenu_tree	eq	<= 6.x-1.4
submenu_tree	eq	5.120.1
submenu_tree	eq	5.120.2
submenu_tree	eq	5.120.3
submenu_tree	eq	5.120.4
submenu_tree	eq	5.120.10
submenu_tree	eq	6.120.10
submenu_tree	eq	6.120.11
submenu_tree	eq	6.120.12
submenu_tree	eq	6.120.13