CVE-2009-2610: XSS
Cross-site scripting (XSS) vulnerability in the Links Related module in the Links Package 5.x before 5.x-1.13 and 6.x before 6.x-1.2, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via the title field.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2610?
CVE-2009-2610 has been rated as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2009-2610?
To fix CVE-2009-2610, upgrade the Links Package module to version 5.x-1.13 or later for Drupal 5.x, or to version 6.x-1.2 or later for Drupal 6.x.
Who is affected by CVE-2009-2610?
CVE-2009-2610 affects users of the Links Package module versions prior to 5.x-1.13 and 6.x-1.2 on Drupal.
What types of attacks can CVE-2009-2610 enable?
CVE-2009-2610 can allow remote authenticated users to inject arbitrary web scripts or HTML, potentially compromising the integrity of the website.
What software versions are vulnerable to CVE-2009-2610?
The vulnerable software versions include Links Package 5.x before 5.x-1.13 and 6.x before 6.x-1.2.