CVE-2008-4710
Drupal Stock Module - XSS
Title source: ruleDescription
Cross-site scripting (XSS) vulnerability in the stock quotes page in Stock 6.x before 6.x-1.0, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Scores
EPSS
0.0023
EPSS Percentile
45.6%
Classification
CWE
CWE-79
Status
published
Affected Products (2)
drupal/stock_module
n/a/n/a
Timeline
Published
Oct 23, 2008
Tracked Since
Feb 18, 2026