CVE-2010-2724: XSS
Cross-site scripting (XSS) vulnerability in the Hierarchical Select module 5.x before 5.x-3.2 and 6.x before 6.x-3.2 for Drupal allows remote authenticated users, with administer taxonomy permissions, to inject arbitrary web script or HTML via unspecified vectors in the hierarchicalselect form.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2724?
CVE-2010-2724 has been classified as a moderate severity cross-site scripting vulnerability.
How do I fix CVE-2010-2724?
To fix CVE-2010-2724, upgrade the Hierarchical Select module to version 5.x-3.2 or 6.x-3.2 or later.
Who is affected by CVE-2010-2724?
CVE-2010-2724 affects authenticated users with administer taxonomy permissions on affected versions of the Hierarchical Select module.
What products are vulnerable to CVE-2010-2724?
The Hierarchical Select module versions 5.x before 5.x-3.2 and 6.x before 6.x-3.2 for Drupal are vulnerable to CVE-2010-2724.
What type of vulnerability is CVE-2010-2724?
CVE-2010-2724 is a cross-site scripting (XSS) vulnerability that allows for the injection of arbitrary web scripts or HTML.