CVE-2009-3653

Cross-site scripting (XSS) vulnerability in the additional links interface in XML Sitemap 5.x-1.6, a module for Drupal, allows remote authenticated users, with…

published October 9, 2009

CVSS
—
EPSS
1%
Percentile
57.5
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in the additional links interface in XML Sitemap 5.x-1.6, a module for Drupal, allows remote authenticated users, with "administer site configuration" permission, to inject arbitrary web script or HTML via unspecified vectors, related to link path output.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00842 · 57.5th percentile
Published
2009-10-09T14:18Z
EPSS history
Timeline
  • 09 OCT 14:18Z
    Cross-site scripting (XSS) vulnerability in the additional links interface in XML Sitemap 5.x-1.6, a module for Drupal, allows remote authenticated users, with…
    cvelistv5