Cross-site scripting (XSS) vulnerability in the additional links interface in XML Sitemap 5.x-1.6, a module for Drupal, allows remote authenticated users, with "administer site configuration" permission, to inject arbitrary web script or HTML via unspecified vectors, related to link path output.
References
Link | Resource |
---|---|
http://drupal.org/node/591732 | Patch Vendor Advisory |
http://www.securityfocus.com/bid/36556 | Patch |
http://drupal.org/node/591724 | Patch Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/53572 |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2009-10-09 07:30
Updated : 2017-08-16 18:31
NVD link : CVE-2009-3653
Mitre link : CVE-2009-3653
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
darren_oh
- xml_sitemap
drupal
- drupal