CVE-2009-2078

Published: Jun 16, 2009Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Booktree 5.x before 5.x-7.3 and 6.x before 6.x-1.1, a module for Drupal, allow remote attackers to inject arbitrary web script or HTML via the (1) node title and (2) node body in a tree root page.

Affected (11)

Products: Heine.familiedeelstra: Booktree

Heine.familiedeelstra

1 product

Booktree

Configuration A

11 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Heine.familiedeelstra Booktree	Version 5.x-1.1
Heine.familiedeelstra Booktree	Version 5.x-1.2
Heine.familiedeelstra Booktree	Version 5.x-1.3
Heine.familiedeelstra Booktree	Version 5.x-1.4
Heine.familiedeelstra Booktree	Version 5.x-1.9
Heine.familiedeelstra Booktree	Version 5.x-1.x dev
Heine.familiedeelstra Booktree	Version 5.x-7.0
Heine.familiedeelstra Booktree	Version 5.x-7.1
Heine.familiedeelstra Booktree	Version 5.x-7.2
Heine.familiedeelstra Booktree	Version 6.x-1.0
Heine.familiedeelstra Booktree	Version 6.x-1.x dev