CVE-2009-3914

Published: Nov 9, 2009Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Temporary Invitation module 5.x before 5.x-2.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the Name field in an invitation.

Affected (22)

Products: Wolfgang Ziegler: Temporary Invitation

Wolfgang Ziegler

1 product

Temporary Invitation

Configuration A

22 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Wolfgang Ziegler Temporary Invitation	Version 5.x-1.0
Wolfgang Ziegler Temporary Invitation	Version 5.x-1.10
Wolfgang Ziegler Temporary Invitation	Version 5.x-1.1
Wolfgang Ziegler Temporary Invitation	Version 5.x-1.2
Wolfgang Ziegler Temporary Invitation	Version 5.x-1.3
Wolfgang Ziegler Temporary Invitation	Version 5.x-1.4
Wolfgang Ziegler Temporary Invitation	Version 5.x-1.5
Wolfgang Ziegler Temporary Invitation	Version 5.x-1.6
Wolfgang Ziegler Temporary Invitation	Version 5.x-1.7
Wolfgang Ziegler Temporary Invitation	Version 5.x-1.8
Wolfgang Ziegler Temporary Invitation	Version 5.x-1.9
Wolfgang Ziegler Temporary Invitation	Version 5.x-1.x-dev
Wolfgang Ziegler Temporary Invitation	Version 5.x-2.0
Wolfgang Ziegler Temporary Invitation	Version 5.x-2.0 rc1
Wolfgang Ziegler Temporary Invitation	Version 5.x-2.0 rc2
Wolfgang Ziegler Temporary Invitation	Version 5.x-2.0 rc3
Wolfgang Ziegler Temporary Invitation	Version 5.x-2.0 rc4
Wolfgang Ziegler Temporary Invitation	Version 5.x-2.0 rc5
Wolfgang Ziegler Temporary Invitation	Version 5.x-2.0 rc6
Wolfgang Ziegler Temporary Invitation	Version 5.x-2.0 rc7
Wolfgang Ziegler Temporary Invitation	Version 5.x-2.1
Wolfgang Ziegler Temporary Invitation	Version 5.x-2.2