CVE-2009-3914
Drupal 5.x - XSS
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in the Temporary Invitation module 5.x before 5.x-2.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the Name field in an invitation.
References (6)
Scores
EPSS
0.0040
EPSS Percentile
60.6%
Classification
CWE
CWE-79
Status
published
Affected Products (23)
wolfgang_ziegler/temporary_invitation
wolfgang_ziegler/temporary_invitation
wolfgang_ziegler/temporary_invitation
wolfgang_ziegler/temporary_invitation
wolfgang_ziegler/temporary_invitation
wolfgang_ziegler/temporary_invitation
wolfgang_ziegler/temporary_invitation
wolfgang_ziegler/temporary_invitation
wolfgang_ziegler/temporary_invitation
wolfgang_ziegler/temporary_invitation
wolfgang_ziegler/temporary_invitation
wolfgang_ziegler/temporary_invitation
wolfgang_ziegler/temporary_invitation
wolfgang_ziegler/temporary_invitation
wolfgang_ziegler/temporary_invitation
... and 8 more
Timeline
Published
Nov 09, 2009
Tracked Since
Feb 18, 2026