EUVD-2013-4265

Malware in sbrugna...

Drupal Google Site Search Module API Data Handling XSS

The remote web server hosts a version of the Google Site Search module for Drupal that is version 6.x prior to 6.x-1.4 or 7.x prior to 7.x-1.10. It is, therefore, affected by a cross-site scripting vulnerability due to a failure to properly sanitize API data before returning it to a user. This...

CVE-2013-4384

Cross-site scripting XSS vulnerability in Google Site Search module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.10 for Drupal allows remote attackers to inject arbitrary web script or HTML by causing crafted data to be returned by the Google API...

Cross site scripting

Cross-site scripting XSS vulnerability in Google Site Search module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.10 for Drupal allows remote attackers to inject arbitrary web script or HTML by causing crafted data to be returned by the Google API...

CVE-2013-4384

The Drupal Google Site Search module is affected by CVE-2013-4384: XSS due to improper sanitization of data returned from the Google API. Affected versions are Google Site Search 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.10. A remote attacker can exploit this via a crafted API response to e...

CVE-2013-4384

Cross-site scripting XSS vulnerability in Google Site Search module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.10 for Drupal allows remote attackers to inject arbitrary web script or HTML by causing crafted data to be returned by the Google API...

SA-CONTRIB-2013-077 - Google Site Search - Cross Site Scripting (XSS)

This module enables you to use the Google API to search one or more sites and show the result in your Drupal site, with your custom styling. The module doesn't sufficiently sanitize the data retrieved from the Google API. This vulnerability is mitigated by the fact that an attack must come from t...