Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2008-3219 - Vulnerability Database
Drupal

Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2008-3219

Medium
Reference: CVE-2008-3219
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2008-3219
Title: Drupal Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Overview:

The Drupal filter_xss_admin function in 5.x before 5.8 and 6.x before 6.3 does not quotprevent use of the object HTML tag in administrator inputquot which has unknown impact and attack vectors probably related to an insufficient cross-site scripting (XSS) protection mechanism.