CVE-2010-2000

Description

Cross-site scripting (XSS) vulnerability in the Bibliography (Biblio) module 5.x through 5.x-1.17 and 6.x through 6.x-1.9 for Drupal allows remote authenticated users, with "administer biblio" privileges, to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-1358.

References

http://www.securityfocus.com/bid/40127

http://secunia.com/advisories/39810

http://drupal.org/node/797192

http://drupal.org/node/796502

http://drupal.org/node/796498

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS