VULNERABILITY INTELLIGENCE
CVE-2013-4503
CVSS score2.1 NONE
EPSS probability0.73%
CISA KEVNot currently listed
Published2014-05-13
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:S/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in the Feed Element Mapper module for Drupal allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via vectors related to options.
Weakness classification
- nvd@nist.gov: CWE-79
Primary references
- secalert@redhat.com
- secalert@redhat.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory