CVEvulnerability
CVE-2013-4503
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-05-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:N/AC:H/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the Feed Element Mapper module for Drupal allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via vectors related to options.
Affected configurations
• feed element mapper project feed element mapper
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://seclists.org/oss-sec/2013/q4/210 seclists.org
- https://drupal.org/node/2124279 Vendor Advisory
- http://seclists.org/oss-sec/2013/q4/210 seclists.org
- https://drupal.org/node/2124279 Vendor Advisory