CVE-2009-2078

Booktree <5.x-7.3 & 6.x-1.1 - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in Booktree 5.x before 5.x-7.3 and 6.x before 6.x-1.1, a module for Drupal, allow remote attackers to inject arbitrary web script or HTML via the (1) node title and (2) node body in a tree root page.

References (5)

Scores

EPSS 0.0032
EPSS Percentile 54.6%

Classification

CWE
CWE-79
Status published

Affected Products (12)

heine.familiedeelstra/booktree
heine.familiedeelstra/booktree
heine.familiedeelstra/booktree
heine.familiedeelstra/booktree
heine.familiedeelstra/booktree
heine.familiedeelstra/booktree
heine.familiedeelstra/booktree
heine.familiedeelstra/booktree
heine.familiedeelstra/booktree
heine.familiedeelstra/booktree
heine.familiedeelstra/booktree
n/a/n/a

Timeline

Published Jun 16, 2009
Tracked Since Feb 18, 2026