CVE-2008-6170

Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.12 and 6.x before 6.6 allows remote authenticated users with create book content or edit node…

published February 19, 2009

CVSS
—
EPSS
2%
Percentile
75.4
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.12 and 6.x before 6.6 allows remote authenticated users with create book content or edit node book hierarchy permissions to inject arbitrary web script or HTML via the book page title.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01587 · 75.4th percentile
Published
2009-02-19T15:02Z
EPSS history
Timeline
  • 19 FEB 15:02Z
    Cross-site scripting (XSS) vulnerability in Drupal 5.x before 5.12 and 6.x before 6.6 allows remote authenticated users with create book content or edit node…
    cvelistv5