CVE-2013-0244: XSS
Cross-site scripting (XSS) vulnerability in Drupal 6.x before 6.28 and 7.x before 7.19, when running with older versions of jQuery that are vulnerable to CVE-2011-4969, allows remote attackers to inject arbitrary web script or HTML via vectors involving unspecified Javascript functions that are used to select DOM elements.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0244?
CVE-2013-0244 has a moderate severity level, as it allows for cross-site scripting (XSS) attacks.
How do I fix CVE-2013-0244?
To fix CVE-2013-0244, upgrade to Drupal 6.x version 6.28 or Drupal 7.x version 7.19 or later.
What are the vulnerable versions affected by CVE-2013-0244?
CVE-2013-0244 affects Drupal versions 6.x before 6.28 and 7.x before 7.19.
What type of vulnerability is CVE-2013-0244?
CVE-2013-0244 is a cross-site scripting (XSS) vulnerability.
Can CVE-2013-0244 lead to data breaches?
Yes, CVE-2013-0244 can potentially lead to data breaches by allowing attackers to inject malicious scripts.