Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2013-6388
4.3
MEDIUMCVSS v2
Published
December 24, 2013
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
Cross-site scripting (XSS) vulnerability in the Color module in Drupal 7.x before 7.24 allows remote attackers to inject arbitrary web script or HTML via vectors related to CSS.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.= 7.0, = 7.16, = 7.21, = 7.18, = 7.15, = 7.17, = 7.3, = 7.4, = 7.10, = 7.5, = 7.6, = 7.12, = 7.13, = 7.20, = 7.8, = 7.9, = 7.x-dev, = 7.1, = 7.11, = 7.19, = 7.2, = 7.7, = 7.14, = 7.22, = 7.23NVD
drupal
NPMImplementation of parts of Drupal’s user/access control API.
NPMImplementation of parts of Drupal’s user/access control API.= 7.0, = 7.16, = 7.21, = 7.18, = 7.15, = 7.17, = 7.3, = 7.4, = 7.10, = 7.5, = 7.6, = 7.12, = 7.13, = 7.20, = 7.8, = 7.9, = 7.x-dev, = 7.1, = 7.11, = 7.19, = 7.2, = 7.7, = 7.14, = 7.22, = 7.23NVD