CVE-2010-3094: XSS
Published Sep 21, 2010
·Updated
Multiple cross-site scripting (XSS) vulnerabilities in Drupal 6.x before 6.18 allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via (1) an action description, (2) an action message, (3) a node, or (4) a taxonomy term, related to the actions feature and the trigger module.
Affected Software
28 affected componentsFixes available
composer/drupal/drupal>=6.0<6.18
6.18
Drupal Drupal=6.0
Drupal Drupal=6.0-beta1
Drupal Drupal=6.0-beta2
Drupal Drupal=6.0-beta3
Drupal Drupal=6.0-beta4
Drupal Drupal=6.0-dev
Drupal Drupal=6.0-rc1
Drupal Drupal=6.0-rc2
Drupal Drupal=6.0-rc3
Drupal Drupal=6.0-rc4
Drupal Drupal=6.1
Drupal Drupal=6.2
Drupal Drupal=6.3
Drupal Drupal=6.4
Drupal Drupal=6.5
Drupal Drupal=6.6
Drupal Drupal=6.7
Drupal Drupal=6.8
Drupal Drupal=6.9
Drupal Drupal=6.10
Drupal Drupal=6.11
Drupal Drupal=6.12
Drupal Drupal=6.13
Drupal Drupal=6.14
Drupal Drupal=6.15
Drupal Drupal=6.16
Drupal Drupal=6.17
Remediation
Patch Available
Event History
Sep 21, 2010
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
May 17, 2022
Advisory Published
via GitHub·05:48 AM
Frequently Asked Questions
1
What is the severity of CVE-2010-3094?
CVE-2010-3094 has been classified as a moderate severity vulnerability due to cross-site scripting risks.
2
How do I fix CVE-2010-3094?
To fix CVE-2010-3094, upgrade your Drupal installation to version 6.18 or later.
3
Who is affected by CVE-2010-3094?
CVE-2010-3094 affects Drupal versions prior to 6.18, including versions 6.0 to 6.17.
4
What types of vulnerabilities are associated with CVE-2010-3094?
CVE-2010-3094 is associated with multiple cross-site scripting (XSS) vulnerabilities.
5
Can authenticated users exploit CVE-2010-3094?
Yes, authenticated users with certain privileges can exploit CVE-2010-3094.