CVE-2010-2250

CVE-2010-2250: vulnerability in drupal6

Published · Updated

Follow this CVE+ Monitor drupal6

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.0%
Drupal 5.x and 6.x before 6.16 uses a user-supplied value in output during site installation which could allow an attacker to craft a URL and perform a cross-site scripting attack.
Affected products
drupal6 · drupal6
Related CVEs — drupal6

In the same product, most dangerous first.

CVE-2010-2473—CVE-2010-2473EPSS 1.0%CVE-2010-2472—CVE-2010-2472EPSS 0.8%