CVE-2010-1530

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Internationalization module 6.x before 6.x-1.4 for Drupal allow remote authenticated users, with translate interface or administer blocks privileges, to inject arbitrary web script or HTML via (1) strings used in block translation or (2) the untranslated input.

References

http://www.securityfocus.com/bid/39304

http://secunia.com/advisories/39361

http://osvdb.org/63589

http://drupal.org/node/764998

http://drupal.org/node/764906

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS