Cross-site scripting (XSS) vulnerability in Drupal 4.7.x... · CVE-2008-0274 · GitHub Advisory Database · GitHub

Cross-site scripting (XSS) vulnerability in Drupal 4.7.x...

Low severity Unreviewed Published May 1, 2022 to the GitHub Advisory Database • Updated Jan 31, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Cross-site scripting (XSS) vulnerability in Drupal 4.7.x and 5.x, when certain .htaccess protections are disabled, allows remote attackers to inject arbitrary web script or HTML via crafted links involving theme .tpl.php files.

References

Published by the National Vulnerability Database

Jan 15, 2008

Published to the GitHub Advisory Database May 1, 2022

Last updated Jan 31, 2023