CVE-2013-0317 in Og Manager Change信息

摘要

由 MITRE

Cross-site scripting (XSS) vulnerability in the Manager Change for Organic Groups (og_manager_change) module 7.x-2.x before 7.x-2.1 for Drupal might allow remote attackers to inject arbitrary web script or HTML via the username in the new manager autocomplete field.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2012-12-06

披露

2013-03-27

管理

已接受

条目

VDB-63876

CPE

准备好

CWE

CWE-79 (已确认)

CVSS

4.3 (VulDB)

EPSS

0.01161

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2013-0317
NVD	https://nvd.nist.gov/vuln/detail/CVE-2013-0317
CVE Details	https://www.cvedetails.com/cve/CVE-2013-0317/

◂ 上一步一览下一步 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!