Cross site scripting

2015-06-1514:59:00

PRIOn knowledge base

www.prio-n.com

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.9%

JSON

Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Ubercart Discount Coupons module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to taxonomy terms.

CPENameOperatorVersion
ubercart_discount_couponseq6.120.10
ubercart_discount_couponseq6.120.13
ubercart_discount_couponseq6.120.16
ubercart_discount_couponseq6.120.15
ubercart_discount_couponseq6.120.14
ubercart_discount_couponseq6.120.11
ubercart_discount_couponseq6.120.12
ubercart_discount_couponseq6.120.17

Name	Operator	Version
ubercart_discount_coupons	eq	6.120.10
ubercart_discount_coupons	eq	6.120.13
ubercart_discount_coupons	eq	6.120.16
ubercart_discount_coupons	eq	6.120.15
ubercart_discount_coupons	eq	6.120.14
ubercart_discount_coupons	eq	6.120.11
ubercart_discount_coupons	eq	6.120.12
ubercart_discount_coupons	eq	6.120.17