CVE-2009-2370: XSS
Published Jul 8, 2009
·Updated
Cross-site scripting (XSS) vulnerability in Advanced Forum 5.x before 5.x-1.1 and 6.x before 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
5 affected components
Michelle Cox Advanced Forum<=5.x-1.0
Michelle Cox Advanced Forum<=6.x-1.0
Michelle Cox Advanced Forum=5.x-1.x-dev
Michelle Cox Advanced Forum=6.x-1.x-dev
Drupal Drupal
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Jul 8, 2009
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
03:30 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-2370?
CVE-2009-2370 is considered a moderate severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2009-2370?
To fix CVE-2009-2370, upgrade the Advanced Forum module to version 5.x-1.1 or 6.x-1.1 or later.
3
What versions of Advanced Forum are affected by CVE-2009-2370?
CVE-2009-2370 affects Advanced Forum versions 5.x before 5.x-1.1 and 6.x before 6.x-1.1.
4
Can CVE-2009-2370 allow attackers to execute scripts?
Yes, CVE-2009-2370 allows remote attackers to inject arbitrary web script or HTML, leading to potential script execution.
5
Is the Drupal core affected by CVE-2009-2370?
No, the Drupal core itself is not affected by CVE-2009-2370.