CVE-2011-1662: XSS
Published Apr 10, 2011
·Updated
Cross-site scripting (XSS) vulnerability in Translation Management module 6.x before 6.x-1.21 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
21 affected components
Icanlocalize Translation Management=6.x-1.0
Icanlocalize Translation Management=6.x-1.0-beta1
Icanlocalize Translation Management=6.x-1.0-beta2
Icanlocalize Translation Management=6.x-1.0-beta3
Icanlocalize Translation Management=6.x-1.0-beta4
Icanlocalize Translation Management=6.x-1.0-beta5
Icanlocalize Translation Management=6.x-1.0-beta6
Icanlocalize Translation Management=6.x-1.0-beta7
Icanlocalize Translation Management=6.x-1.1
Icanlocalize Translation Management=6.x-1.2
Icanlocalize Translation Management=6.x-1.2-beta1
Icanlocalize Translation Management=6.x-1.3
Icanlocalize Translation Management=6.x-1.4
Icanlocalize Translation Management=6.x-1.5
Icanlocalize Translation Management=6.x-1.6
Icanlocalize Translation Management=6.x-1.7
Icanlocalize Translation Management=6.x-1.8
Icanlocalize Translation Management=6.x-1.9
Icanlocalize Translation Management=6.x-1.20
Icanlocalize Translation Management=6.x-1.x-dev
Drupal Drupal
Remediation
Patch Available
Event History
Apr 10, 2011
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Data Sourced
02:51 AM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
Which installations are affected?
Drupal sites using the Icanlocalize Translation Management module 6.x before version 6.x-1.21 are affected.
2
What access does an attacker need to exploit this issue?
The issue can be exploited remotely without authentication. Exploitation requires a vector with moderate attack complexity, although the specific input vectors are not identified in the available data.
3
What should administrators do?
Apply the available patch by upgrading the Translation Management module to version 6.x-1.21 or later.