CVE-2009-4559

Cross-site scripting (XSS) vulnerability in the Submitted By module 6.x before 6.x-1.3 for Drupal allows remote authenticated users, with "administer content…

published January 4, 2010

CVSS
—
EPSS
1%
Percentile
57.2
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in the Submitted By module 6.x before 6.x-1.3 for Drupal allows remote authenticated users, with "administer content types" privileges, to inject arbitrary web script or HTML via an input string for "submitted by" text.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00833 · 57.2th percentile
Published
2010-01-04T21:00Z
EPSS history
Timeline
  • 04 JAN 21:00Z
    Cross-site scripting (XSS) vulnerability in the Submitted By module 6.x before 6.x-1.3 for Drupal allows remote authenticated users, with "administer content…
    cvelistv5