QwikSec

Security Database

CVE

CWE

Training

CVE-2009-2083

Published: Jun 16, 2009

Modified: Sep 16, 2024

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the term data detail page in Taxonomy manager 5.x before 5.x-1.2, a module for Drupal, allows remote authenticated users, with administer taxonomy privileges or the ability to use free tagging to add taxonomy terms, to inject arbitrary web script or HTML via "Parent and related terms."

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://lampsecurity.org/drupal-6-taxonomy-manager-xss-vulnerability

x_refsource_MISC

http://drupal.org/node/487620

x_refsource_CONFIRM

third-party-advisory

x_refsource_SECUNIA

vdb-entry

x_refsource_BID

http://drupal.org/node/487818

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.