CVE-2013-2177

The CVE-2013-2177 entry affects the Drupal contributed module Display Suite (branch 7.x-1.x: before 7.x-1.7; branch 7.x-2.x: before 7.x-2.3). The vulnerability arises from insufficient sanitization of entity bundle labels, permitting remote authenticated users with certain permissions to inject a...

CVE-2013-2177

Cross-site scripting XSS vulnerability in the Display Suite module 7.x-1.x before 7.x-1.7 and 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via an entity bundle label...

Drupal Display Suite模块HTML注入漏洞

Bugtraq ID:60516 Drupal是一款开源的内容管理系统。 Drupal Display Suite插件不正确处理用户提交的输入，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时可获取目标用户敏感信息或劫持用户会话。 0 Drupal Display Suite Plugin 7.x-1.x Drupal Display Suite Plugin 7.x-2.x 厂商解决方案 Drupal Display Suite Plugin 7.x-1.7或7.x-2.3已经修复此漏洞，建议用户下载更新： https://drupal.org/node/20179...

SA-CONTRIB-2013-052 - Display Suite - Cross Site Scripting (XSS)

Display Suite allows you to take full control over how your content is displayed using a drag and drop interface. In certain situations, Display Suite does not properly sanitize entity bundle labels, allowing a malicious user to embed scripts within a page, resulting in a Cross-site Scripting XSS...

CVE-2013-0323

Cross-site scripting XSS vulnerability in the Display Suite module 7.x-1.x before 7.x-1.7 and 7.x-2.x before 7.x-2.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via the author field...

CVE-2013-0323

Cross-site scripting XSS vulnerability in the Display Suite module 7.x-1.x before 7.x-1.7 and 7.x-2.x before 7.x-2.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via the author field...

CVE-2013-0323

The CVE-2013-0323 vulnerability affects the Drupal Display Suite contributed module (7.x-1.x before 7.x-1.7 and 7.x-2.x before 7.x-2.1). The root cause is insufficient sanitization of user data in the author field, enabling remote XSS. Impact is arbitrary script/HTML execution in pages rendering ...

SA-CONTRIB-2013-021 - Display Suite - Cross Site Scripting (XSS)

Display Suite allows you to take full control over how your content is displayed using a drag and drop interface. In certain situations, Display Suite does not properly sanitize user-supplied data, allowing a malicious user to embed scripts within a page, resulting in a Cross-site Scripting XSS...

SA-CONTRIB-2011-034 - Display Suite - Cross Site Scripting

Display Suite allows you to take full control over how your content is displayed using a drag and drop interface. Arrange your nodes, views, comments, user data etc. the way you want without having to work your way through dozens of template files. In certain situations, Display Suite does not...