CVE-2010-3022

Published: Aug 16, 2010Modified: Apr 29, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Performance logging module in the Devel module 5.x before 5.x-1.3 and 6.x before 6.x-1.21 for Drupal allows remote authenticated users, with add url aliases and report access permissions, to inject arbitrary web script or HTML via crafted node paths in a URL.

Affected (25)

Products: Drupal: Devel Module

Drupal

1 product

Devel Module

Configuration A

25 vulnerable

Vulnerable Software	Affected Versions
Drupal Devel Module	Up to 5x-1.2
Drupal Devel Module	Up to 6.x-1.20
Drupal Devel Module	Version 5.x-1.0
Drupal Devel Module	Version 5.x-1.1
Drupal Devel Module	Version 5.x-1.3
Drupal Devel Module	Version 6.x-1.0
Drupal Devel Module	Version 6.x-1.10
Drupal Devel Module	Version 6.x-1.11
Drupal Devel Module	Version 6.x-1.12
Drupal Devel Module	Version 6.x-1.13
Drupal Devel Module	Version 6.x-1.14
Drupal Devel Module	Version 6.x-1.15
Drupal Devel Module	Version 6.x-1.16
Drupal Devel Module	Version 6.x-1.17
Drupal Devel Module	Version 6.x-1.18
Drupal Devel Module	Version 6.x-1.19
Drupal Devel Module	Version 6.x-1.1
Drupal Devel Module	Version 6.x-1.2
Drupal Devel Module	Version 6.x-1.3
Drupal Devel Module	Version 6.x-1.4
Drupal Devel Module	Version 6.x-1.5
Drupal Devel Module	Version 6.x-1.6
Drupal Devel Module	Version 6.x-1.7
Drupal Devel Module	Version 6.x-1.8
Drupal Devel Module	Version 6.x-1.9