NVD

Id
36670  
Name
CVE-2013-0323  
Description
Cross-site scripting (XSS) vulnerability in the Display Suite module 7.x-1.x before 7.x-1.7 and 7.x-2.x before 7.x-2.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via the author field.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-03-27  
Modified Date
2013-04-04  
Seq
2013-0323  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
187397 36670 CVE-2013-0323 http://drupal.org/node/1922424  View
187398 36670 CVE-2013-0323 http://drupal.org/node/1922430  View
187399 36670 CVE-2013-0323 http://drupal.org/node/1922438  View
187400 36670 CVE-2013-0323 http://drupalcode.org/project/ds.git/commitdiff/45d490e  View
187401 36670 CVE-2013-0323 http://drupalcode.org/project/ds.git/commitdiff/665c791  View
187402 36670 CVE-2013-0323 http://drupalcode.org/project/ds.git/commitdiff/90bcd8f  View
187403 36670 CVE-2013-0323 [oss-security] 20130220 Re: CVE request for Drupal Core and contributed modules  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20482 JVNDB-2013-002057 Drupal 用 Display Suite モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用 Display Suite モジュールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-0323 60265 CVE-2013-0323 36670 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002057.html 2013-02-20 2013-04-01 View