CVE-2009-2083 | BDVDB-2026-37059 Detail

Description#

Cross-site scripting (XSS) vulnerability in the term data detail page in Taxonomy manager 5.x before 5.x-1.2, a module for Drupal, allows remote authenticated users, with administer taxonomy privileges or the ability to use free tagging to add taxonomy terms, to inject arbitrary web script or HTML via "Parent and related terms."

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12009-06-16Record published in the CVE List.
2. Version 22024-09-16Most recent update recorded in the CVE List.