Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2013-0244
2.6
LOWCVSS v2
Published
January 19, 2014
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
Cross-site scripting (XSS) vulnerability in Drupal 6.x before 6.28 and 7.x before 7.19, when running with older versions of jQuery that are vulnerable to CVE-2011-4969, allows remote attackers to inject arbitrary web script or HTML via vectors involving unspecified Javascript functions that are used to select DOM elements.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.= 7.0, = 7.16, = 7.18, = 7.15, = 7.10, = 7.9, = 7.x-dev, = 7.5, = 7.6, = 7.17, = 7.8, = 7.11, = 7.12, = 7.13, = 7.3, = 7.4, = 7.1, = 7.2, = 7.14, = 7.7, = 6.0, = 6.2, = 6.14, = 6.24, = 6.13, = 6.25, = 6.18, = 6.21, = 6.4, = 6.5, = 6.11, = 6.12, = 6.19, = 6.26, = 6.27, = 6.1, = 6.10, = 6.17, = 6.8, = 6.22, = 6.7, = 6.20, = 6.3, = 6.9, = 6.15, = 6.16, = 6.23, = 6.6NVD
drupal
NPMImplementation of parts of Drupal’s user/access control API.
NPMImplementation of parts of Drupal’s user/access control API.= 7.0, = 7.16, = 7.18, = 7.15, = 7.10, = 7.9, = 7.x-dev, = 7.5, = 7.6, = 7.17, = 7.8, = 7.11, = 7.12, = 7.13, = 7.3, = 7.4, = 7.1, = 7.2, = 7.14, = 7.7, = 6.0, = 6.2, = 6.14, = 6.24, = 6.13, = 6.25, = 6.18, = 6.21, = 6.4, = 6.5, = 6.11, = 6.12, = 6.19, = 6.26, = 6.27, = 6.1, = 6.10, = 6.17, = 6.8, = 6.22, = 6.7, = 6.20, = 6.3, = 6.9, = 6.15, = 6.16, = 6.23, = 6.6