CVE-2009-4063
Severity CVSS v4.0:
Pending analysis
Type:
CWE-79
Cross-Site Scripting (XSS)
Publication date:
24/11/2009
Last modified:
09/04/2025
Description
Cross-site scripting (XSS) vulnerability in the Subgroups for Organic Groups (OG) module 5.x before 5.x-4.0 and 5.x before 5.x-3.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified node titles.
Impact
Base Score 2.0
4.30
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* | ||
cpe:2.3:a:ezra_barnett_gildesgame:og_subgroups:5.x-1.x:dev:*:*:*:*:*:* | ||
cpe:2.3:a:ezra_barnett_gildesgame:og_subgroups:5.x-2.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:ezra_barnett_gildesgame:og_subgroups:5.x-3.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:ezra_barnett_gildesgame:og_subgroups:5.x-3.0:dev:*:*:*:*:*:* | ||
cpe:2.3:a:ezra_barnett_gildesgame:og_subgroups:5.x-3.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:ezra_barnett_gildesgame:og_subgroups:5.x-3.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:ezra_barnett_gildesgame:og_subgroups:5.x-3.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:ezra_barnett_gildesgame:og_subgroups:5.x-3.x:dev:*:*:*:*:*:* | ||
cpe:2.3:a:ezra_barnett_gildesgame:og_subgroups:5.x-4.x:dev:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://drupal.org/node/630004
- http://drupal.org/node/636562
- http://osvdb.org/60287
- http://secunia.com/advisories/37438
- http://www.securityfocus.com/bid/37056
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54341
- http://drupal.org/node/630004
- http://drupal.org/node/636562
- http://osvdb.org/60287
- http://secunia.com/advisories/37438
- http://www.securityfocus.com/bid/37056
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54341