CVE-2009-1942

Published: Jun 5, 2009Modified: Apr 23, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Quiz module 5.x, 6.x-2.x before 6.x-2.2, and 6.x-3.x before 6.x-3.0, a module for Drupal, allows remote authenticated users, with create quizzes or quiz questions access, to inject arbitrary web script or HTML via unspecified vectors.

Affected (15)

Products: Drupal: Quiz

Drupal

1 product

Quiz

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Drupal Quiz	Version 5.x
Drupal Quiz	Version 6.x-2.0
Drupal Quiz	Version 6.x-2.0 alpha1
Drupal Quiz	Version 6.x-2.0 alpha2
Drupal Quiz	Version 6.x-2.0 beta1
Drupal Quiz	Version 6.x-2.0 rc1
Drupal Quiz	Version 6.x-2.0 rc2
Drupal Quiz	Version 6.x-2.1
Drupal Quiz	Version 6.x-2.x dev
Drupal Quiz	Version 6.x-3.0
Drupal Quiz	Version 6.x-3.0 alpha1
Drupal Quiz	Version 6.x-3.0 alpha2
Drupal Quiz	Version 6.x-3.0 beta1
Drupal Quiz	Version 6.x-3.x dev
Drupal Quiz	Version 6.x-3.x rc2