3.5
CVSSv2

CVE-2008-3095

Published: 09/07/2008 Updated: 08/08/2017
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
VMScore: 312
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in the Organic Groups (OG) module 5.x prior to 5.x-7.3 and 6.x prior to 6.x-1.0-RC1, a module for Drupal, allows remote authenticated users, with group owner permissions, to inject arbitrary web script or HTML via unspecified vectors.

Vulnerable Product Search on Vulmon Subscribe to Product

drupal organic groups module 5

drupal organic groups module 6