Cross site scripting

2015-06-1514:59:00

PRIOn knowledge base

www.prio-n.com

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.7%

JSON

Cross-site scripting (XSS) vulnerability in the Webform module before 6.x-3.22, 7.x-3.x before 7.x-3.22, and 7.x-4.x before 7.x-4.4 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a node title, which is used as the default title of a webform block.

CPENameOperatorVersion
webformeq7.120.42
webformeq7.120.320
webformeq7.120.36
webformeq7.120.34
webformeq7.120.39
webformeq7.120.318
webformeq7.120.310
webformeq7.120.38
webformeq<= 6.x-3.21
webformeq7.120.31

Name	Operator	Version
webform	eq	7.120.42
webform	eq	7.120.320
webform	eq	7.120.36
webform	eq	7.120.34
webform	eq	7.120.39
webform	eq	7.120.318
webform	eq	7.120.310
webform	eq	7.120.38
webform	eq	<= 6.x-3.21
webform	eq	7.120.31