CVE-2008-1976

Published: Apr 27, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Drupal modules (1) Internationalization (i18n) 5.x before 5.x-2.3 and 5.x-1.1 and 6.x before 6.x-1.0 beta 1; and (2) Localizer 5.x before 5.x-3.4, 5.x-2.1, and 5.x-1.11; allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (23)

Products: Localizer Project: Localizer · Internationalization Project: Internationalization

Localizer Project

1 product

Localizer

Internationalization Project

1 product

Internationalization

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Localizer Project Localizer	Version 5.x-1.0
Localizer Project Localizer	Version 5.x-1.10
Localizer Project Localizer	Version 5.x-1.1
Localizer Project Localizer	Version 5.x-1.2
Localizer Project Localizer	Version 5.x-1.3
Localizer Project Localizer	Version 5.x-1.4
Localizer Project Localizer	Version 5.x-1.5
Localizer Project Localizer	Version 5.x-1.6
Localizer Project Localizer	Version 5.x-1.7
Localizer Project Localizer	Version 5.x-1.8
Localizer Project Localizer	Version 5.x-1.9
Localizer Project Localizer	Version 5.x-1.x dev
Localizer Project Localizer	Version 5.x-2.x dev
Localizer Project Localizer	Version 5.x-3.0
Localizer Project Localizer	Version 5.x-3.1
Localizer Project Localizer	Version 5.x-3.2
Localizer Project Localizer	Version 5.x-3.3

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Internationalization Project Internationalization	Version 5.x-1.0
Internationalization Project Internationalization	Version 5.x-1.x dev
Internationalization Project Internationalization	Version 5.x-2.0
Internationalization Project Internationalization	Version 5.x-2.1
Internationalization Project Internationalization	Version 5.x-2.2
Internationalization Project Internationalization	Version 6.x-1.x dev