Cross site scripting

2013-06-2416:55:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.3%

JSON

Cross-site scripting (XSS) vulnerability in the Filebrowser module 6.x-2.x before 6.x-2.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to “lists of files.”

CPENameOperatorVersion
filebrowsereq6.0.0-x2.0-rc1
filebrowsereq6.0.0-x2.0-rc2
filebrowsereq6.0.0-x2.0-rc3
filebrowsereq6.0.0-x2.0-rc4
filebrowsereq6.0.0-x2.0-rc5
filebrowsereq6.0.0-x2.0-rc6
filebrowsereq6.0.0-x2.0-rc7
filebrowsereq6.0.0-x2.0-rc8
filebrowsereq6.0.0-x2.0-rc9
filebrowsereq6.0.0-x2.0-rc10

Name	Operator	Version
filebrowser	eq	6.0.0-x2.0-rc1
filebrowser	eq	6.0.0-x2.0-rc2
filebrowser	eq	6.0.0-x2.0-rc3
filebrowser	eq	6.0.0-x2.0-rc4
filebrowser	eq	6.0.0-x2.0-rc5
filebrowser	eq	6.0.0-x2.0-rc6
filebrowser	eq	6.0.0-x2.0-rc7
filebrowser	eq	6.0.0-x2.0-rc8
filebrowser	eq	6.0.0-x2.0-rc9
filebrowser	eq	6.0.0-x2.0-rc10