CVE-2009-1069: XSS
Multiple cross-site scripting (XSS) vulnerabilities in the node edit form feature in Drupal Content Construction Kit (CCK) 6.x before 6.x-2.2, a module for Drupal, allow remote attackers to inject arbitrary web script or HTML via the (1) titles of candidate referenced nodes in the Node reference sub-module and the (2) names of candidate referenced users in the User reference sub-module.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1069?
CVE-2009-1069 is classified as a moderate severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2009-1069?
To fix CVE-2009-1069, upgrade the Drupal Content Construction Kit (CCK) to version 6.x-2.2 or later.
What software versions are affected by CVE-2009-1069?
CVE-2009-1069 affects Drupal Content Construction Kit versions 6.x before 6.x-2.2, including all pre-release versions.
Can CVE-2009-1069 lead to data breaches?
Yes, attackers exploiting CVE-2009-1069 can inject malicious scripts, potentially leading to data breaches or session hijacking.
Who is at risk of CVE-2009-1069?
Organizations using affected versions of the Drupal Content Construction Kit are at risk of CVE-2009-1069.