Drupal Easy Breadcrumb Module Unspecified Cross Site Scripting Vulnerability

Bugtraq ID:	68106
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 18 2014 12:00AM
Updated:	Jun 18 2014 12:00AM
Credit:	Rob Dogg, Stefan Ruijsenaars
Vulnerable:
Not Vulnerable:

Drupal Easy Breadcrumb Module Unspecified Cross Site Scripting Vulnerability

Drupal Easy Breadcrumb module is prone to an unspecified cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to execute arbitrary script code in the context of the vulnerable site, potentially allowing the attacker to steal cookie-based authentication credentials.

Easy breadcrumbs 7.x-2.x versions prior to 7.x-2.10 are vulnerable.

Drupal Easy Breadcrumb Module Unspecified Cross Site Scripting Vulnerability

Attackers can exploit this issue using browser. To exploit a cross-site scripting issue the attacker needs to entice a user into following a malicious URI.

Drupal Easy Breadcrumb Module Unspecified Cross Site Scripting Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Drupal Easy Breadcrumb Module Unspecified Cross Site Scripting Vulnerability

References: