4.3
CVSSv2

CVE-2008-1133

Published: 04/03/2008 Updated: 20/04/2021
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

The Drupal.checkPlain function in Drupal 6.0 only escapes the first instance of a character in ECMAScript, which allows remote malicious users to conduct cross-site scripting (XSS) attacks.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

drupal drupal 6.0