CVE-2013-4384

Google Site Search Module - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in Google Site Search module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.10 for Drupal allows remote attackers to inject arbitrary web script or HTML by causing crafted data to be returned by the Google API.

References (4)

[Third Party Advisory, VDB Entry] http://osvdb.org/97503

[Various Sources] https://drupal.org/node/2092395

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/87285

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/62495

Scores

EPSS 0.0026

EPSS Percentile 48.7%

Details

CWE

CWE-79

Status published

Products (20)

google_site_search_project/google_site_search_module

... and 10 more

Published Oct 09, 2013

Tracked Since Feb 18, 2026