CVE-2010-1074: XSS
Cross-site scripting (XSS) vulnerability in the Currency Exchange module before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to watchdog logging.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1074?
CVE-2010-1074 has a moderate severity rating due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2010-1074?
To fix CVE-2010-1074, upgrade the Currency Exchange module to version 6.x-1.2 or later.
What systems are affected by CVE-2010-1074?
CVE-2010-1074 affects the Currency Exchange module versions prior to 6.x-1.2, including versions 5.x-1.x and earlier.
What type of vulnerability is CVE-2010-1074?
CVE-2010-1074 is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML.
Can exploiting CVE-2010-1074 allow data theft?
Yes, exploiting CVE-2010-1074 could allow attackers to steal sensitive information from users via executed scripts.