Vulnerability Description
Cross-site scripting (XSS) vulnerability in the Submitted By module 6.x before 6.x-1.3 for Drupal allows remote authenticated users, with "administer content types" privileges, to inject arbitrary web script or HTML via an input string for "submitted by" text.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nanwich | Submitted By | 6.x-1.0 |
| Drupal | Drupal | All versions |
Related Weaknesses (CWE)
References
- http://drupal.org/node/520372PatchVendor Advisory
- http://www.securityfocus.com/bid/35708
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51788
- http://drupal.org/node/520372PatchVendor Advisory
- http://www.securityfocus.com/bid/35708
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51788
FAQ
What is CVE-2009-4559?
CVE-2009-4559 is a vulnerability with a CVSS score of 3.5 (LOW). Cross-site scripting (XSS) vulnerability in the Submitted By module 6.x before 6.x-1.3 for Drupal allows remote authenticated users, with "administer content types" privileges, to inject arbitrary web...
How severe is CVE-2009-4559?
CVE-2009-4559 has been rated LOW with a CVSS base score of 3.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-4559?
Check the references section above for vendor advisories and patch information. Affected products include: Nanwich Submitted By, Drupal Drupal.