CVE-2008-4530

Drupal Brilliant Gallery < 5.x-4.1 - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in Brilliant Gallery 5.x before 5.x-4.2, a module for Drupal, allows remote authenticated users with permissions to inject arbitrary web script or HTML via unspecified vectors related to posting of answers.

References (4)

[Patch, Vendor Advisory] http://drupal.org/node/315919

[Vendor Advisory] http://secunia.com/advisories/32106

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/45636

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/31554

Scores

EPSS 0.0015

EPSS Percentile 35.6%

Classification

CWE

CWE-79

Status published

Affected Products (27)

drupal/brilliant_gallery < 5.x-4.1

drupal/brilliant_gallery

... and 12 more

Timeline

Published Oct 09, 2008

Tracked Since Feb 18, 2026