CVE-2010-1984

Cross-site scripting XSS vulnerability in the Taxonomy Breadcrumb module 5.x before 5.x-1.5 and 6.x before 6.x-1.1 for Drupal allows remote authenticated users, with administer taxonomy permissions, to inject arbitrary web script or HTML via the taxonomy term name in a Breadcrumb display...

Cross site scripting

Cross-site scripting XSS vulnerability in the Taxonomy Breadcrumb module 6.x before 6.x-1.1 for Drupal allows remote authenticated users, with administer taxonomy permissions, to inject arbitrary web script or HTML via the node title in a Breadcrumb display...

CVE-2010-1984

CVE-2010-1984 is a cross-site scripting (XSS) vulnerability in the Drupal Taxonomy Breadcrumb module, affecting 5.x versions before 5.x-1.5 and 6.x before 6.x-1.1. The issue allows remote authenticated users with administer taxonomy permissions to inject arbitrary script/HTML via the taxonomy ter...

CVE-2010-1976

The CVE relates to an XSS vulnerability in Drupal’s Taxonomy Breadcrumb module (6.x prior to 6.x-1.1). The issue allows remote authenticated users who have administer taxonomy permissions to inject arbitrary script/HTML via the node title in the Breadcrumb display. Affected component: Drupal Taxo...

SA-CONTRIB-2010-032 - Taxonomy Breadcrumb - Cross Site Scripting (XSS)

The Taxonomy Breadcrumb module generates taxonomy based breadcrumbs on node pages and taxonomy/term pages. This module does not properly sanitize taxonomy term name and, for 6.x, node titles when displayed in breadcrumbs, leading to a Cross Site Scripting XSS vulnerability. XSS vulnerabilities ma...

SA-CONTRIB-2010-013 - Menu Breadcrumb - Cross site scripting

The Menu Breadcrumb module allows to use the menu the current page belongs to as breadcrumb. The module does not properly sanitize parts of the provided block, leading to a cross-site scripting XSS vulnerability. Such an attack may lead to a malicious user gaining full administrative access...