CVE-2011-1662

Drupal 6.x - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in Translation Management module 6.x before 6.x-1.21 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (4)

[Patch, Vendor Advisory] http://drupal.org/node/1111174

[Vendor Advisory] http://secunia.com/advisories/43950

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/66475

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/47098

Scores

EPSS 0.0026

EPSS Percentile 48.7%

Classification

CWE

CWE-79

Status published

Affected Products (21)

icanlocalize/translation_management

... and 6 more

Timeline

Published Apr 10, 2011

Tracked Since Feb 18, 2026