CVE-2009-0575

Cross-site scripting XSS vulnerability in the themeviewsbulkoperationsconfirmation function in viewsbulkoperations.module in Views Bulk Operations 5.x before 5.x-1.3 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-0575

CVE-2009-0575 concerns Drupal’s Views Bulk Operations module, where the theme_views_bulk_operations_confirmation function in views_bulk_operations.module is vulnerable to cross-site scripting (XSS). Affected: Views Bulk Operations 5.x before 5.x-1.3 and 6.x before 6.x-1.4. Vector is unspecified b...

SA-CONTRIB-2009-005 - Views bulk operations - Cross site scripting

Views bulk operations augments Views by enabling bulk operations to be executed on the content displayed by a view. Views bulk operations does not properly escape user-supplied data on some pages, allowing malicious users to insert arbitrary HTML and script code into these pages. Such a cross sit...