Vulnerabilities (CVE)

Filtered by vendor Drupal Subscribe
Filtered by product Cck Comment Reference
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2009-1342 1 Drupal 2 Cck Comment Reference, Drupal 2024-02-04 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in the CCK comment reference module 6.x before 6.x-1.2, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via certain comment titles associated with a node edit form.