CVE-2013-1782

CVE-2013-1782

EPSS 1.1%

Cross-site scripting (XSS) vulnerability in the Responsive Blog Theme 7.x-1.x before 7.x-1.6 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via vectors related to social icons.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://drupalcode.org/project/responsive_blog.git/commitdiff/ce47de9 http://drupal.org/node/1929396 http://drupal.org/node/1929488 http://osvdb.org/90688 http://secunia.com/advisories/52423 http://www.openwall.com/lists/oss-security/2013/02/28/3 http://www.securityfocus.com/bid/58218