Cross site scripting

2013-06-2416:55:00

PRIOn knowledge base

www.prio-n.com

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.8%

JSON

Cross-site scripting (XSS) vulnerability in the Rules module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with the “administer rules” permission to inject arbitrary web script or HTML via a rule tag.

CPENameOperatorVersion
ruleseq7.120.20
ruleseq7.0.0-x2.0-beta1
ruleseq7.0.0-x2.0-beta2
ruleseq7.0.0-x2.0-beta3
ruleseq7.0.0-x2.0-rc1
ruleseq7.0.0-x2.0-rc2
ruleseq7.120.21
ruleseq7.120.22

Name	Operator	Version
rules	eq	7.120.20
rules	eq	7.0.0-x2.0-beta1
rules	eq	7.0.0-x2.0-beta2
rules	eq	7.0.0-x2.0-beta3
rules	eq	7.0.0-x2.0-rc1
rules	eq	7.0.0-x2.0-rc2
rules	eq	7.120.21
rules	eq	7.120.22