medium4.3
CVE-2009-1249
Cross-site scripting (XSS) vulnerability in Feed element mapper 5.x before 5.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script…
Impact
Cross-site scripting (XSS) vulnerability in Feed element mapper 5.x before 5.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the content title in admin/content/node-type/nodetype/map.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | Feedapi Mapper | Versions 5.x-1.0, 5.x-1.x |