CVE-2013-2129
24.06.2013, 16:55
Cross-site scripting (XSS) vulnerability in the Webform module 6.x-3.x before 6.x-3.19 for Drupal allows remote authenticated users with the "edit own webform content" or "edit all webform content" permissions to inject arbitrary web script or HTML via a component label.
| Vendor | Product | Version |
|---|---|---|
| nathan_haug | webform | 𝑥 ≤ 6.x-3.18 |
| nathan_haug | webform | 6.x-3.0:x |
| nathan_haug | webform | 6.x-3.0:x |
| nathan_haug | webform | 6.x-3.0:x |
| nathan_haug | webform | 6.x-3.0:x |
| nathan_haug | webform | 6.x-3.0:x |
| nathan_haug | webform | 6.x-3.0:x |
| nathan_haug | webform | 6.x-3.0:x |
| nathan_haug | webform | 6.x-3.1:x |
| nathan_haug | webform | 6.x-3.2:x |
| nathan_haug | webform | 6.x-3.3:x |
| nathan_haug | webform | 6.x-3.4:x |
| nathan_haug | webform | 6.x-3.5:x |
| nathan_haug | webform | 6.x-3.6:x |
| nathan_haug | webform | 6.x-3.7:x |
| nathan_haug | webform | 6.x-3.8:x |
| nathan_haug | webform | 6.x-3.9:x |
| nathan_haug | webform | 6.x-3.10:x |
| nathan_haug | webform | 6.x-3.11:x |
| nathan_haug | webform | 6.x-3.12:x |
| nathan_haug | webform | 6.x-3.13:x |
| nathan_haug | webform | 6.x-3.14:x |
| nathan_haug | webform | 6.x-3.15:x |
| nathan_haug | webform | 6.x-3.16:x |
| nathan_haug | webform | 6.x-3.17:x |
| nathan_haug | webform | 6.x-3.x:x |
𝑥
= Vulnerable software versions
References