CVE-2013-1787

Devsaran Corporate < 7.x-1.3 - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Simple Corporate theme before 7.x-1.4 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors.

Scores

EPSS 0.0020
EPSS Percentile 42.0%

Details

CWE
CWE-79
Status published
Products (5)
devsaran/corporate < 7.x-1.3
devsaran/corporate
devsaran/corporate
devsaran/corporate
n/a/n/a
Published Mar 27, 2013
Tracked Since Feb 18, 2026