CVE-2013-1787: XSS
Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Simple Corporate theme before 7.x-1.4 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1787?
CVE-2013-1787 has a moderate severity level, allowing potential XSS attacks on affected systems.
How do I fix CVE-2013-1787?
To fix CVE-2013-1787, upgrade to Simple Corporate theme version 7.x-1.4 or higher.
Who is affected by CVE-2013-1787?
CVE-2013-1787 affects remote authenticated users with administer themes permission on versions of the Simple Corporate theme before 7.x-1.4.
What types of attacks does CVE-2013-1787 allow?
CVE-2013-1787 allows attackers to inject arbitrary web scripts or HTML into the Simple Corporate theme.
Is there a risk if CVE-2013-1787 is not addressed?
If CVE-2013-1787 is not addressed, it poses a risk of successful cross-site scripting attacks leading to data compromise.