medium4.3
CVE-2008-0276
Cross-site scripting (XSS) vulnerability in the Devel module before 5.x-0.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via a sit…
Impact
Cross-site scripting (XSS) vulnerability in the Devel module before 5.x-0.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via a site variable, related to lack of escaping of the variable table.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | Drupal | Versions 4.0.0, 4.1.0, 4.2.0_rc, 4.4, 4.4.1, 4.4.2 |