CVE-2008-3500

Drupal 5.x - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in the Suggested Terms module 5.x before 5.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via crafted Taxonomy terms.

Scores

EPSS 0.0033
EPSS Percentile 55.5%

Classification

CWE
CWE-79
Status draft

Affected Products (1)

drupal/suggested_terms_module

Timeline

Published Aug 06, 2008
Tracked Since Feb 18, 2026