CVE-2013-0322

EXPLOITED IN THE WILD RANSOMWARE

Ubercart - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in Views in the Ubercart module 7.x-3.x before 7.x-3.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via the full name field.

References (5)

[Patch] http://drupal.org/node/1922136

[Patch, Vendor Advisory] http://drupal.org/node/1922418

[Various Sources] http://drupalcode.org/project/ubercart.git/commitdiff/f9d69b5

[Third Party Advisory] http://secunia.com/advisories/52298

[Mailing List] http://www.openwall.com/lists/oss-security/2013/02/21/5

Scores

EPSS 0.0037

EPSS Percentile 58.2%

Details

VulnCheck KEV 2022-01-26

InTheWild.io 2022-05-25

Ransomware Use Confirmed

CWE

CWE-79

Status published

Products (17)

ubercart/ubercart

... and 7 more

Published Mar 27, 2013

Tracked Since Feb 18, 2026