First published: Thu Oct 09 2014(Updated: )
Cross-site scripting (XSS) vulnerability in the Professional theme 7.x before 7.x-2.04 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via vectors related to custom copyright information.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Drupal Professional Theme | =7.x-1.0 | |
Drupal Professional Theme | =7.x-1.1 | |
Drupal Professional Theme | =7.x-1.2 | |
Drupal Professional Theme | =7.x-1.3 | |
Drupal Professional Theme | =7.x-1.4 | |
Drupal Professional Theme | =7.x-1.5 | |
Drupal Professional Theme | =7.x-1.6 | |
Drupal Professional Theme | =7.x-1.7 | |
Drupal Professional Theme | =7.x-1.8 | |
Drupal Professional Theme | =7.x-1.9 | |
Drupal Professional Theme | =7.x-1.x-dev | |
Drupal Professional Theme | =7.x-2.0 | |
Drupal Professional Theme | =7.x-2.01 | |
Drupal Professional Theme | =7.x-2.02 | |
Drupal Professional Theme | =7.x-2.03 | |
Drupal Professional Theme | =7.x-2.x-dev |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.