CVE-2008-2998

Published: Jul 3, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Aggregation module 5.x before 5.x-4.4 for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (7)

Products: Drupal: Aggregation Module

Drupal

1 product

Aggregation Module

Configuration A

7 vulnerable · 8 platform

Vulnerable Software	Affected Versions
Drupal Aggregation Module	Version 3.0
Drupal Aggregation Module	Version 3.1
Drupal Aggregation Module	Version 3.2
Drupal Aggregation Module	Version 4.0
Drupal Aggregation Module	Version 4.1
Drupal Aggregation Module	Version 4.2
Drupal Aggregation Module	Version 4.3

Running on/with	Platform Versions
Drupal Drupal	Version 5.0
Drupal Drupal	Version 5.1
Drupal Drupal	Version 5.1_rev1.1
Drupal Drupal	Version 5.2
Drupal Drupal	Version 5.3
Drupal Drupal	Version 5.4
Drupal Drupal	Version 5.5.
Drupal Drupal	Version 5.7