CVE-2009-5096

CVE-2009-5096

EPSS 1.3%

Cross-site scripting (XSS) vulnerability in the Flag Content module 5.x-2.x before 5.x-2.10 for Drupal allows remote attackers to inject arbitrary web script or HTML via the Reason parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://drupal.org/node/610868 http://drupal.org/node/610870 http://osvdb.org/59119 http://secunia.com/advisories/37124 https://exchange.xforce.ibmcloud.com/vulnerabilities/53900 http://www.securityfocus.com/bid/36785 http://www.vupen.com/english/advisories/2009/2999