CVE-2013-1778
Devsaran Creative - XSS
Title source: ruleDescription
Cross-site scripting (XSS) vulnerability in the Creative Theme 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via vectors related to social icons.
Scores
EPSS
0.0020
EPSS Percentile
42.0%
Details
CWE
CWE-79
Status
published
Products (3)
devsaran/creative
devsaran/creative
n/a/n/a
Published
Mar 27, 2013
Tracked Since
Feb 18, 2026