CVE-2008-1428
Ubercart 5.x <5.x-1.0-beta7 - XSS
Title source: llmDescription
Multiple cross-site scripting (XSS) vulnerabilities in the Ubercart 5.x before 5.x-1.0-beta7 module for Drupal allow remote attackers to inject arbitrary web script or HTML via a text attribute value for a product.
Scores
EPSS
0.0025
EPSS Percentile
48.5%
Classification
CWE
CWE-79
Status
draft
Affected Products (1)
drupal/ubercart_module
< 5-1.0
Timeline
Published
Mar 20, 2008
Tracked Since
Feb 18, 2026