QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2013-4275

Back to search

CVE-2013-4275

Published: Nov 13, 2019

Modified: Aug 6, 2024

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the zen_breadcrumb function in template.php in the Zen theme 6.x-1.x, 7.x-3.x before 7.x-3.2, and 7.x-5.x before 7.x-5.4 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via the breadcrumb separator field.

VendorProductVersions

Zen

Zen theme

affected
6.x-1.x
affected
7.x-3.x before 7.x-3.2
affected
and 7.x-5.x before 7.x-5.4

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now