Taxonomy Filter CVE-2010-1303 Cross-Site Scripting Vulnerability
BID:73655
Info
Taxonomy Filter CVE-2010-1303 Cross-Site Scripting Vulnerability
| Bugtraq ID: | 73655 |
| Class: | Input Validation Error |
| CVE: |
CVE-2010-1303 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 08 2010 12:00AM |
| Updated: | Apr 08 2010 12:00AM |
| Credit: | Unknown |
| Vulnerable: |
Jim Berry Taxonomy Filter 6.X-1.X-Dev Jim Berry Taxonomy Filter 6.X-1.0 |
| Not Vulnerable: | |
Discussion
Taxonomy Filter CVE-2010-1303 Cross-Site Scripting Vulnerability
Taxonomy Filter is prone to a cross-site scripting vulnerability. Multiple cross-site scripting (XSS) vulnerabilities in the Taxonomy Filter module 6.x before 6.x-1.1 for Drupal allow remote authenticated users, with administer taxonomy permissions or create node permissions when free tagging is enabled, to inject arbitrary web script or HTML via vocabulary (1) names, (2) terms, and (3) filter menus.
Taxonomy Filter is prone to a cross-site scripting vulnerability. Multiple cross-site scripting (XSS) vulnerabilities in the Taxonomy Filter module 6.x before 6.x-1.1 for Drupal allow remote authenticated users, with administer taxonomy permissions or create node permissions when free tagging is enabled, to inject arbitrary web script or HTML via vocabulary (1) names, (2) terms, and (3) filter menus.
Exploit / POC
Taxonomy Filter CVE-2010-1303 Cross-Site Scripting Vulnerability
An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.