CVE-2007-5621

Multiple cross-site scripting (XSS) vulnerabilities in the Token module before 4.7.x-1.5, and 5.x before 5.x-1.9, for Drupal; as used by the ASIN Field…

published October 22, 2007

CVSS
—
EPSS
1%
Percentile
57.5
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in the Token module before 4.7.x-1.5, and 5.x before 5.x-1.9, for Drupal; as used by the ASIN Field, e-Commerce, Fullname field for CCK, Invite, Node Relativity, Pathauto, PayPal Node, and Ubercart modules; allow remote authenticated users with a post comments privilege to inject arbitrary web script or HTML via unspecified vectors related to (1) comments, (2) vocabulary names, (3) term names, and (4) usernames.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00842 · 57.5th percentile
Published
2007-10-22T19:00Z
EPSS history
Timeline
  • 22 OCT 19:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in the Token module before 4.7.x-1.5, and 5.x before 5.x-1.9, for Drupal; as used by the ASIN Field…
    cvelistv5