CVE-2010-1958

Published: Jun 21, 2010Modified: Apr 29, 2026

2.1

Vector

AV:N/AC:H/Au:S/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the FileField module 5.x before 5.x-2.5 and 6.x before 6.x-3.4 for Drupal allows remote authenticated users, with create or edit permissions and 'Path to File' or 'URL to File' display enabled, to inject arbitrary web script or HTML via the file name (filepath parameter).

Affected (33)

Products: Quicksketch: Filefield

Quicksketch

1 product

Filefield

Configuration A

33 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Quicksketch Filefield	Version 5.x-1.x-dev
Quicksketch Filefield	Version 5.x-2.0
Quicksketch Filefield	Version 5.x-2.1
Quicksketch Filefield	Version 5.x-2.2
Quicksketch Filefield	Version 5.x-2.3
Quicksketch Filefield	Version 5.x-2.3 rc2
Quicksketch Filefield	Version 5.x-2.3 rc3
Quicksketch Filefield	Version 5.x-2.3 rc4
Quicksketch Filefield	Version 5.x-2.4
Quicksketch Filefield	Version 5.x-2.x-dev
Quicksketch Filefield	Version 6.x-1.0 alpha1
Quicksketch Filefield	Version 6.x-1.0 alpha2
Quicksketch Filefield	Version 6.x-1.0 alpha3
Quicksketch Filefield	Version 6.x-1.0 beta1
Quicksketch Filefield	Version 6.x-1.0 beta2
Quicksketch Filefield	Version 6.x-1.0 beta3
Quicksketch Filefield	Version 6.x-3.0
Quicksketch Filefield	Version 6.x-3.0 alpha1
Quicksketch Filefield	Version 6.x-3.0 alpha2
Quicksketch Filefield	Version 6.x-3.0 alpha3
Quicksketch Filefield	Version 6.x-3.0 alpha4
Quicksketch Filefield	Version 6.x-3.0 alpha5
Quicksketch Filefield	Version 6.x-3.0 alpha6
Quicksketch Filefield	Version 6.x-3.0 alpha7
Quicksketch Filefield	Version 6.x-3.0 beta1
Quicksketch Filefield	Version 6.x-3.0 beta2
Quicksketch Filefield	Version 6.x-3.0 beta3
Quicksketch Filefield	Version 6.x-3.0 rc1
Quicksketch Filefield	Version 6.x-3.1
Quicksketch Filefield	Version 6.x-3.2
Quicksketch Filefield	Version 6.x-3.3
Quicksketch Filefield	Version 6.x-3.5
Quicksketch Filefield	Version 6.x-3.x-dev