Cross-Site Scripting Vulnerability in Drupal's Views Bulk Operations Module
CVE-2009-0575
Currently unrated
What is CVE-2009-0575?
The Views Bulk Operations module for Drupal is vulnerable to a Cross-Site Scripting (XSS) flaw in the theme_views_bulk_operations_confirmation function. This vulnerability allows remote attackers to inject arbitrary web scripts or HTML into the application through specific vectors related to node titles. Affected versions include 5.x prior to 5.x-1.3 and 6.x prior to 6.x-1.4. It is crucial for site administrators using these versions to apply patches to mitigate the risk of exploitation.