CVE-2008-1131

Drupal 6.0 - Authenticated Cross-Site Scripting via Content Edit Form Titles

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in Drupal 6.0 allows remote authenticated users to inject arbitrary web script or HTML via titles in content edit forms.

References (3)

Core 3

Core References

Patch x_refsource_confirm

http://drupal.org/node/227608

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/29118

Patch vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/28026

Scores

EPSS 0.0028

EPSS Percentile 51.6%

Details

CWE

CWE-79

Status published

Products (1)

drupal/drupal 6.0

Published Mar 04, 2008

Tracked Since Feb 18, 2026