CVE-2013-6387 in Drupal
Summary
Cross-site scripting (XSS) vulnerability in the Image module in Drupal 7.x before 7.24 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the description field.
Reservation
11/04/2013
Disclosure
12/24/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 11240 | Drupal Input Sanitizer Stored cross site scripting | 79 | Not defined | Official fix | CVE-2013-6387 |