CVE-2008-1133
Drupal 6.0 - XSS
Title source: llmDescription
The Drupal.checkPlain function in Drupal 6.0 only escapes the first instance of a character in ECMAScript, which allows remote attackers to conduct cross-site scripting (XSS) attacks.
Scores
EPSS
0.0043
EPSS Percentile
62.5%
Classification
CWE
CWE-79
Status
draft
Affected Products (1)
drupal/drupal
Timeline
Published
Mar 04, 2008
Tracked Since
Feb 18, 2026