CVE-2010-4813 | BDVDB-2026-46604 Detail

Description#

Cross-site scripting (XSS) vulnerability in the Category Tokens module 6.x before 6.x-1.1 for Drupal allows remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML by editing or creating vocabulary names, which are not properly handled in token help.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/42168
http://osvdb.org/69145
https://exchange.xforce.ibmcloud.com/vulnerabilities/63203
http://www.securityfocus.com/bid/44780
http://drupal.org/node/968176

Exploit#

No public exploit known

History#

Version 12011-07-08Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.