Cross site scripting

2012-11-0215:55:00

PRIOn knowledge base

www.prio-n.com

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.1%

JSON

Cross-site scripting (XSS) vulnerability in the administrative interface in the Better Revisions module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the “administer better revisions” permission to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
better_revisionseq7.120.10
better_revisionseq7.x-1.0 rc1
better_revisionseq7.x-1.x dev

Name	Operator	Version
better_revisions	eq	7.120.10
better_revisions	eq	7.x-1.0 rc1
better_revisions	eq	7.x-1.x dev

References

www.openwall.com/lists/oss-security/2012/10/04/6

www.openwall.com/lists/oss-security/2012/10/07/1

drupal.org/node/1713378

drupal.org/node/1719402