Back to search
CVE-2010-1530
Published: Apr 26, 2010
Modified: Sep 17, 2024
PUBLISHED
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Internationalization module 6.x before 6.x-1.4 for Drupal allow remote authenticated users, with translate interface or administer blocks privileges, to inject arbitrary web script or HTML via (1) strings used in block translation or (2) the untranslated input.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
63589
vdb-entry
x_refsource_OSVDB
http://drupal.org/node/764906
x_refsource_CONFIRM
http://drupal.org/node/764998
x_refsource_CONFIRM
39304
vdb-entry
x_refsource_BID
39361
third-party-advisory
x_refsource_SECUNIA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now