Ron Jerome » Bibliography : Security Vulnerabilities, CVEs, Published In 2009
Cross-site scripting (XSS) vulnerability in the Bibliography (aka Biblio) module 6.x-1.6 for Drupal allows remote authenticated users, with certain content-creation privileges, to inject arbitrary web script or HTML via the Title field, probably a different vulnerability than CVE-2009-3479.
Max CVSS
2.1
EPSS Score
0.10%
Published
2009-09-30
Updated
2017-08-17
Cross-site scripting (XSS) vulnerability in Bibliography (Biblio) 5.x before 5.x-1.17 and 6.x before 6.x-1.6, a module for Drupal, allows remote attackers, with "create content displayed by the Bibliography module" permissions, to inject arbitrary web script or HTML via a title.
Max CVSS
4.3
EPSS Score
0.17%
Published
2009-09-30
Updated
2009-10-01
2 vulnerabilities found