What is the severity of CVE-2013-0324?

CVE-2013-0324 has been classified as a moderate severity vulnerability due to the potential for unauthorized web script injection.

How do I fix CVE-2013-0324?

To fix CVE-2013-0324, update the Menu Reference module to version 7.x-1.0 or later.

Who is affected by CVE-2013-0324?

CVE-2013-0324 affects remote authenticated users with the "Administer menus and menu items" permission in Drupal installations using the vulnerable version of the Menu Reference module.

What kind of attack can CVE-2013-0324 enable?

CVE-2013-0324 can enable cross-site scripting (XSS) attacks, allowing attackers to execute arbitrary web scripts or HTML in the context of affected users.

Which version of the Menu Reference module is vulnerable according to CVE-2013-0324?

The vulnerable version of the Menu Reference module is 7.x-1.x before 7.x-1.0.

Vulnerability/
CVE-2013-0324

low

2.1

CWE

27/3/2013

17/9/2024

CVE-2013-0324: XSS

First published: Wed Mar 27 2013(Updated: )

Cross-site scripting (XSS) vulnerability in the Rendered links formatter in the Menu Reference module 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with the "Administer menus and menu items" permission to inject arbitrary web script or HTML via the menu link title.

Credit: secalert@redhat.com

Affected Software	Affected Version	How to fix
Tomasbarej Menu Reference	=7.x-1.x-dev
Drupal Drupal

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2013-0324?
CVE-2013-0324 has been classified as a moderate severity vulnerability due to the potential for unauthorized web script injection.
How do I fix CVE-2013-0324?
To fix CVE-2013-0324, update the Menu Reference module to version 7.x-1.0 or later.
Who is affected by CVE-2013-0324?
CVE-2013-0324 affects remote authenticated users with the "Administer menus and menu items" permission in Drupal installations using the vulnerable version of the Menu Reference module.
What kind of attack can CVE-2013-0324 enable?
CVE-2013-0324 can enable cross-site scripting (XSS) attacks, allowing attackers to execute arbitrary web scripts or HTML in the context of affected users.
Which version of the Menu Reference module is vulnerable according to CVE-2013-0324?
The vulnerable version of the Menu Reference module is 7.x-1.x before 7.x-1.0.

collector/nvd-index
agent/references
agent/softwarecombine
agent/type
agent/remedy
agent/severity
agent/weakness
agent/author
agent/tags
agent/description
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/first-publish-date
agent/event
agent/source
vendor/tomasbarej
canonical/tomasbarej menu reference
version/tomasbarej menu reference/7.x-1.x-dev
vendor/drupal
canonical/drupal drupal

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2013-0324?
CVE-2013-0324 has been classified as a moderate severity vulnerability due to the potential for unauthorized web script injection.
How do I fix CVE-2013-0324?
To fix CVE-2013-0324, update the Menu Reference module to version 7.x-1.0 or later.
Who is affected by CVE-2013-0324?
CVE-2013-0324 affects remote authenticated users with the "Administer menus and menu items" permission in Drupal installations using the vulnerable version of the Menu Reference module.
What kind of attack can CVE-2013-0324 enable?
CVE-2013-0324 can enable cross-site scripting (XSS) attacks, allowing attackers to execute arbitrary web scripts or HTML in the context of affected users.
Which version of the Menu Reference module is vulnerable according to CVE-2013-0324?
The vulnerable version of the Menu Reference module is 7.x-1.x before 7.x-1.0.

CVE-2013-0324: XSS

Remedy

Remedy

Remedy

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2013-0324?

How do I fix CVE-2013-0324?

Who is affected by CVE-2013-0324?

What kind of attack can CVE-2013-0324 enable?

Which version of the Menu Reference module is vulnerable according to CVE-2013-0324?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2013-0324?

How do I fix CVE-2013-0324?

Who is affected by CVE-2013-0324?

What kind of attack can CVE-2013-0324 enable?

Which version of the Menu Reference module is vulnerable according to CVE-2013-0324?