4 matches found
CVE-2026-7508: Improper Control of Generation of Code
A vulnerability was found in Bootstrap CMS 0.9.0-alpha. Affected is an unknown function of the file resources/views/pages/show.blade.php of the component Page Creation Handler. Performing a manipulation of the argument body results in code injection. Remote exploitation of the attack is possible...
Cross site scripting
Cross-site scripting XSS vulnerability in the Taxonomy Views Integrator TVI module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to "views pages."...
PT-2012-3417
Name of the Vulnerable Software and Affected Versions Drupal Taxonomy Views Integrator TVI module versions 6.x-1.x before 6.x-1.3 Description A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to...
CVE-2012-1653: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Taxonomy Views Integrator TVI module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to "views pages."...