CVE-2010-2724

Published: Jul 13, 2010Modified: Apr 29, 2026

2.1

Vector

AV:N/AC:H/Au:S/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Hierarchical Select module 5.x before 5.x-3.2 and 6.x before 6.x-3.2 for Drupal allows remote authenticated users, with administer taxonomy permissions, to inject arbitrary web script or HTML via unspecified vectors in the hierarchical_select form.

Affected (31)

Products: Wimleers: Hierarchical Select

Wimleers

1 product

Hierarchical Select

Configuration A

28 vulnerable

Vulnerable Software	Affected Versions
Wimleers Hierarchical Select	Version 5.x-1.0
Wimleers Hierarchical Select	Version 5.x-1.1
Wimleers Hierarchical Select	Version 5.x-1.2
Wimleers Hierarchical Select	Version 5.x-1.3
Wimleers Hierarchical Select	Version 5.x-1.4
Wimleers Hierarchical Select	Version 5.x-1.x dev
Wimleers Hierarchical Select	Version 5.x-2.0
Wimleers Hierarchical Select	Version 5.x-2.0 beta1
Wimleers Hierarchical Select	Version 5.x-2.0 beta2
Wimleers Hierarchical Select	Version 5.x-2.0 rc1
Wimleers Hierarchical Select	Version 5.x-2.0 rc2
Wimleers Hierarchical Select	Version 5.x-2.0 rc3
Wimleers Hierarchical Select	Version 5.x-2.0 rc4
Wimleers Hierarchical Select	Version 5.x-2.1
Wimleers Hierarchical Select	Version 5.x-2.2
Wimleers Hierarchical Select	Version 5.x-2.x dev
Wimleers Hierarchical Select	Version 5.x-3.0
Wimleers Hierarchical Select	Version 5.x-3.0 beta1
Wimleers Hierarchical Select	Version 5.x-3.0 beta2
Wimleers Hierarchical Select	Version 5.x-3.0 rc1
Wimleers Hierarchical Select	Version 5.x-3.0 rc2
Wimleers Hierarchical Select	Version 5.x-3.0 rc3
Wimleers Hierarchical Select	Version 5.x-3.0 rc4
Wimleers Hierarchical Select	Version 5.x-3.0 rc5
Wimleers Hierarchical Select	Version 5.x-3.0 rc6
Wimleers Hierarchical Select	Version 5.x-3.0 rc7
Wimleers Hierarchical Select	Version 5.x-3.1
Wimleers Hierarchical Select	Version 5.x-3.x dev