CVE-2009-2079 | BDVDB-2026-37055 Detail

Description#

Cross-site scripting (XSS) vulnerability in the administrative page interface in Taxonomy manager 5.x before 5.x-1.2 and 6.x before 6.x-1.1, a module for Drupal, allows remote authenticated users, with administer taxonomy privileges or the ability to use free tagging to add taxonomy terms, to inject arbitrary web script or HTML via (1) vocabulary names, (2) synonyms, and (3) term names.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12009-06-16Record published in the CVE List.
2. Version 22024-09-17Most recent update recorded in the CVE List.