CVE-2010-1303 | BDVDB-2026-41143 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in the Taxonomy Filter module 6.x before 6.x-1.1 for Drupal allow remote authenticated users, with administer taxonomy permissions or create node permissions when free tagging is enabled, to inject arbitrary web script or HTML via vocabulary (1) names, (2) terms, and (3) filter menus.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://drupal.org/node/622096
http://drupal.org/node/758756
http://www.osvdb.org/63425
http://secunia.com/advisories/39220
https://exchange.xforce.ibmcloud.com/vulnerabilities/57445

Exploit#

No public exploit known

History#

Version 12010-04-08Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.