CVEvulnerability
CVE-2010-1303
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2010-04-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:N/AC:H/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Taxonomy Filter module 6.x before 6.x-1.1 for Drupal allow remote authenticated users, with administer taxonomy permissions or create node permissions when free tagging is enabled, to inject arbitrary web script or HTML via vocabulary (1) names, (2) terms, and (3) filter menus.
Affected configurations
• jim berry taxonomy filter 6.x-1.0
• jim berry taxonomy filter 6.x-1.x-dev
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://drupal.org/node/622096 Patch
- http://drupal.org/node/758756 Patch, Vendor Advisory
- http://secunia.com/advisories/39220 Vendor Advisory
- http://www.osvdb.org/63425 www.osvdb.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57445 exchange.xforce.ibmcloud.com
- http://drupal.org/node/622096 Patch
- http://drupal.org/node/758756 Patch, Vendor Advisory
- http://secunia.com/advisories/39220 Vendor Advisory
- http://www.osvdb.org/63425 www.osvdb.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57445 exchange.xforce.ibmcloud.com