CVE-2008-5999
Ajax Checklist module <5.x-1.1 - XSS
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in the Ajax Checklist module 5.x before 5.x-1.1 for Drupal allows remote authenticated users, with create and edit permissions for posts, to inject arbitrary web script or HTML via unspecified vectors involving the ajax_checklist filter.
Scores
EPSS
0.0012
EPSS Percentile
30.9%
Classification
CWE
CWE-79
Status
published
Affected Products (2)
drupal/ajax_checklist
n/a/n/a
Timeline
Published
Jan 28, 2009
Tracked Since
Feb 18, 2026