← Back

CVE-2010-1530

nvd nist
Published: Apr 26, 2010Modified: Apr 29, 2026

JSON object

Loading...
2.1
Vector
AV:N/AC:H/Au:S/C:N/I:P/A:N
Exploitability: 3.9 / Impact: 2.9
Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Internationalization module 6.x before 6.x-1.4 for Drupal allow remote authenticated users, with translate interface or administer blocks privileges, to inject arbitrary web script or HTML via (1) strings used in block translation or (2) the untranslated input.

Affected (10)

Products: Reyero: I18n
Reyero
1 product
I18n
Configuration A
10 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Reyero
I18n
Version 6.x-1.0
I18n
Version 6.x-1.0 beta1
I18n
Version 6.x-1.0 beta2
I18n
Version 6.x-1.0 beta3
I18n
Version 6.x-1.0 beta4
I18n
Version 6.x-1.0 beta6
I18n
Version 6.x-1.0 dev
I18n
Version 6.x-1.1
I18n
Version 6.x-1.2
I18n
Version 6.x-1.3
Running on/withPlatform Versions
Drupal
Drupal
All versions

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (10)

Source: cve@mitre.org
Patch
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch

Timeline

No history available yet.