CVE-2013-0321 - Cross-site scripting (XSS) vulnerability in Views in the Ubercart Views (uc_views) module 6.x before 6.x-3.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the full name field

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in Views in the Ubercart Views (uc_views) module 6.x before 6.x-3.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the full name field

Published Mar 27, 2013

4.3

MEDIUM

CVSS 2.0

EPSS 1.16%

Description

Cross-site scripting (XSS) vulnerability in Views in the Ubercart Views (uc_views) module 6.x before 6.x-3.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the full name field.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

http://drupal.org/node/1922128
x_refsource_CONFIRMPatch
http://drupal.org/node/1922416
x_refsource_MISCPatchVendor Advisory
http://drupalcode.org/project/uc_views.git/commitdiff/157d5d3
x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2013/02/21/5
mailing-listx_refsource_MLIST
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-0339
Advisory

Link	Providers	Tags
http://drupal.org/node/1922128		x_refsource_CONFIRMPatch
http://drupal.org/node/1922416		x_refsource_MISCPatchVendor Advisory
http://drupalcode.org/project/uc_views.git/commitdiff/157d5d3		x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2013/02/21/5		mailing-listx_refsource_MLIST
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-0339		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner redhat

Published Mar 27, 2013

Updated Sep 16, 2024

Reserved Dec 6, 2012

Link CVE-2013-0321

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2013-0321

Red Hat

No data

ENISA EUVD

Assigner redhat

Published Mar 27, 2013

Updated Sep 16, 2024

Link EUVD-2013-0339

GitHub

No data