CVE-2008-6533

Description

Drupal 5.x before 5.13 and 6.x before 6.7 does not delete all related content when an input format is deleted, which prevents the content from being properly filtered and allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.

References

https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00767.html

https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00740.html

https://exchange.xforce.ibmcloud.com/vulnerabilities/47259

http://www.vupen.com/english/advisories/2008/3414

http://www.osvdb.org/50662

http://secunia.com/advisories/33147

http://secunia.com/advisories/33112

http://drupal.org/node/345441

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS