CVE-2008-6275

CVE-2008-6275

EPSS 1.1%

Cross-site scripting (XSS) vulnerability in the User Karma module 5.x before 5.x-1.13 and 6.x before 6.x-1.0-beta1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified messages.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://drupal.org/node/339553 http://osvdb.org/50208 http://secunia.com/advisories/32904 https://exchange.xforce.ibmcloud.com/vulnerabilities/46947 http://www.securityfocus.com/bid/32491