CVE Feed

    Dashboard / CVE / CVE-2011-3373

    CVE-2011-3373

    Drupal Views Builk Operations (VBO) module 6.x-1.0 through 6.x-1.10 does not properly escape the vocabulary help when the vocabulary has had user tagging enabled and the "Modify node taxonomy terms" action is used. A remote attacker could provide a specially-crafted URL that could lead to cross-site scripting (XSS) attack.

    Published:Nov 25, 2019
    Last Modified:Nov 21, 2024
    EPS:Nov 25, 2019
    EPSS Score:0.0059
    CVSS Score:6.1

    Affected Products

    Vendor
    Drupal
    Product
    Views Builk Operations

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High