CVE-2010-4521: XSS
Published Dec 23, 2010
·Updated
Cross-site scripting (XSS) vulnerability in the Views module 6.x before 6.x-2.12 for Drupal allows remote attackers to inject arbitrary web script or HTML via a page path.
Affected Software
32 affected components
Earl Miles Views=6.x-2.0
Earl Miles Views=6.x-2.0-alpha1
Earl Miles Views=6.x-2.0-alpha2
Earl Miles Views=6.x-2.0-alpha3
Earl Miles Views=6.x-2.0-alpha4
Earl Miles Views=6.x-2.0-alpha5
Earl Miles Views=6.x-2.0-beta1
Earl Miles Views=6.x-2.0-beta2
Earl Miles Views=6.x-2.0-beta3
Earl Miles Views=6.x-2.0-beta4
Earl Miles Views=6.x-2.0-rc1
Earl Miles Views=6.x-2.0-rc2
Earl Miles Views=6.x-2.0-rc3
Earl Miles Views=6.x-2.0-rc4
Earl Miles Views=6.x-2.0-rc5
Earl Miles Views=6.x-2.1
Earl Miles Views=6.x-2.2
Earl Miles Views=6.x-2.3
Earl Miles Views=6.x-2.4
Earl Miles Views=6.x-2.5
Earl Miles Views=6.x-2.6
Earl Miles Views=6.x-2.7
Earl Miles Views=6.x-2.8
Earl Miles Views=6.x-2.9
Earl Miles Views=6.x-2.10
Earl Miles Views=6.x-2.11
Earl Miles Views=6.x-2.x-dev
Earl Miles Views=6.x-3.0-alpha1
Earl Miles Views=6.x-3.0-alpha2
Earl Miles Views=6.x-3.0-alpha3
Earl Miles Views=6.x-3.x-dev
Drupal Drupal
Remediation
Patch Available
Patch Available
Patch Available
Event History
Dec 23, 2010
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
06:00 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-4521?
CVE-2010-4521 is categorized as a moderate severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2010-4521?
To mitigate CVE-2010-4521, update to at least Views module version 6.x-2.12 or later.
3
What systems are affected by CVE-2010-4521?
CVE-2010-4521 affects all versions of the Views module prior to 6.x-2.12 for Drupal.
4
What type of vulnerability is CVE-2010-4521?
CVE-2010-4521 is a cross-site scripting (XSS) vulnerability.
5
Who is the vendor associated with CVE-2010-4521?
CVE-2010-4521 relates to the Views module developed by Earl Miles.