CVE-2008-6533

Drupal 5.x before 5.13 and 6.x before 6.7 does not delete all related content when an input format is deleted, which prevents the content from being properly…

published March 26, 2009

CVSS
—
EPSS
2%
Percentile
80.6
In the wild
Unconfirmed
What it is

Drupal 5.x before 5.13 and 6.x before 6.7 does not delete all related content when an input format is deleted, which prevents the content from being properly filtered and allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02008 · 80.6th percentile
Published
2009-03-26T20:28Z
EPSS history
Timeline
  • 26 MAR 20:28Z
    Drupal 5.x before 5.13 and 6.x before 6.7 does not delete all related content when an input format is deleted, which prevents the content from being properly…
    cvelistv5