CVE-2008-1978
Ubercart 5.x <5.x-1.0 rc3 - XSS
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in the Ubercart 5.x before 5.x-1.0 rc3 module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via node titles related to unspecified product features, a different vector than CVE-2008-1428.
References (5)
Scores
EPSS
0.0023
EPSS Percentile
45.7%
Classification
CWE
CWE-79
Status
draft
Affected Products (1)
drupal/ubercart_module
< 5-1.0
Timeline
Published
Apr 27, 2008
Tracked Since
Feb 18, 2026