Cross-Site Scripting Vulnerability in Drupal Localization Client Module
CVE-2009-1344

Currently unrated

Key Information:

Vendor
Drupal
Status
Localization Client
Vendor
CVE Published:
20 April 2009

Summary

A cross-site scripting (XSS) vulnerability exists in the Localization client module for Drupal, enabling remote attackers to inject arbitrary web scripts or HTML through input submitted during the translation functionality. This flaw affects specific versions of the module, allowing potential exploitation by malicious entities to compromise user data and web applications.

References

http://osvdb.org/53703
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/34546
vdb-entryx_refsource_BID
http://drupal.org/node/434682
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.