CVE-2009-1342

Published: Apr 20, 2009

Modified: Sep 16, 2024

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the CCK comment reference module 6.x before 6.x-1.2, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via certain comment titles associated with a node edit form.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

53702

vdb-entry

x_refsource_OSVDB

ADV-2009-1060

vdb-entry

x_refsource_VUPEN

34547

vdb-entry

x_refsource_BID

34739

third-party-advisory

x_refsource_SECUNIA

http://drupal.org/node/434836

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2009-1342

Description

Affected Products

References