CVE-2011-5188

CVE-2011-5188

EPSS 0.9%

Cross-site scripting (XSS) vulnerability in the Support Timer module 6.x-1.x before 6.x-1.4 for Drupal allows remote authenticated users with the "track time spent" permission to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://drupal.org/node/1357278 http://drupal.org/node/1357384 http://secunia.com/advisories/47030 https://exchange.xforce.ibmcloud.com/vulnerabilities/71596 http://www.osvdb.org/77423