Cross site scripting

2015-04-2116:59:00

PRIOn knowledge base

www.prio-n.com

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.7%

JSON

Cross-site scripting (XSS) vulnerability in the Course module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a node title.

CPENameOperatorVersion
courseeq7.0.0-x1.0-alpha1
courseeq7.120.12
courseeq7.0.0-x1.0-rc2
courseeq6.120.11
courseeq7.0.0-x1.0-rc3
courseeq7.0.0-x1-xdev
courseeq6.0.0-x1.0-rc6
courseeq7.0.0-x1.0-rc1
courseeq6.0.0-x1.0-rc1
courseeq7.120.11

Name	Operator	Version
course	eq	7.0.0-x1.0-alpha1
course	eq	7.120.12
course	eq	7.0.0-x1.0-rc2
course	eq	6.120.11
course	eq	7.0.0-x1.0-rc3
course	eq	7.0.0-x1-xdev
course	eq	6.0.0-x1.0-rc6
course	eq	7.0.0-x1.0-rc1
course	eq	6.0.0-x1.0-rc1
course	eq	7.120.11