VULNERABILITY INTELLIGENCE
CVE-2009-2083
CVSS score3.5 NONE
EPSS probability0.90%
CISA KEVNot currently listed
Published2009-06-16
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in the term data detail page in Taxonomy manager 5.x before 5.x-1.2, a module for Drupal, allows remote authenticated users, with administer taxonomy privileges or the ability to use free tagging to add taxonomy terms, to inject arbitrary web script or HTML via "Parent and related terms."
Weakness classification
- nvd@nist.gov: CWE-79
Primary references
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Exploit, URL Repurposed
- cve@mitre.org — Vendor Advisory
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, URL Repurposed
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108