CVE-2013-6387 - Cross-site scripting (XSS) vulnerability in the Image module in Drupal 7.x before 7.24 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the description field

Back Back to CVE browser

LOW

Cross-site scripting (XSS) vulnerability in the Image module in Drupal 7.x before 7.24 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the description field

Published Dec 24, 2013

2.1

LOW

CVSS 2.0

EPSS 1.44%

Description

Cross-site scripting (XSS) vulnerability in the Image module in Drupal 7.x before 7.24 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the description field.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

http://www.debian.org/security/2013/dsa-2804
vendor-advisoryx_refsource_DEBIAN
http://www.openwall.com/lists/oss-security/2013/11/22/4
mailing-listx_refsource_MLIST
https://drupal.org/SA-CORE-2013-003
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
http://www.debian.org/security/2013/dsa-2804		vendor-advisoryx_refsource_DEBIAN
http://www.openwall.com/lists/oss-security/2013/11/22/4		mailing-listx_refsource_MLIST
https://drupal.org/SA-CORE-2013-003		x_refsource_CONFIRMPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner redhat

Published Dec 24, 2013

Updated Aug 6, 2024

Reserved Nov 4, 2013

Link CVE-2013-6387

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2013-6387

Red Hat

Severity n/a

Public date n/a

Links CVE-2013-6387