CVE-2010-1958

Cross-site scripting (XSS) vulnerability in the FileField module 5.x before 5.x-2.5 and 6.x before 6.x-3.4 for Drupal allows remote authenticated users, with…

published June 21, 2010

CVSS
—
EPSS
1%
Percentile
62.2
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in the FileField module 5.x before 5.x-2.5 and 6.x before 6.x-3.4 for Drupal allows remote authenticated users, with create or edit permissions and 'Path to File' or 'URL to File' display enabled, to inject arbitrary web script or HTML via the file name (filepath parameter).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00991 · 62.2th percentile
Published
2010-06-21T19:00Z
EPSS history
Timeline
  • 21 JUN 19:00Z
    Cross-site scripting (XSS) vulnerability in the FileField module 5.x before 5.x-2.5 and 6.x before 6.x-3.4 for Drupal allows remote authenticated users, with…
    cvelistv5