CVE-2010-1362

Cross-site scripting (XSS) vulnerability in the Own Term module 6.x-1.0 for Drupal allows remote authenticated users, with "create additional terms"…

published April 13, 2010

CVSS
—
EPSS
1%
Percentile
57.3
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in the Own Term module 6.x-1.0 for Drupal allows remote authenticated users, with "create additional terms" privileges, to inject arbitrary web script or HTML via the term description field in a term listing page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00837 · 57.3th percentile
Published
2010-04-13T18:00Z
EPSS history
Timeline
  • 13 APR 18:00Z
    Cross-site scripting (XSS) vulnerability in the Own Term module 6.x-1.0 for Drupal allows remote authenticated users, with "create additional terms"…
    cvelistv5