CVE-2013-2129

Published: Jun 24, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Webform module 6.x-3.x before 6.x-3.19 for Drupal allows remote authenticated users with the "edit own webform content" or "edit all webform content" permissions to inject arbitrary web script or HTML via a component label.

Affected (26)

Products: Nathan Haug: Webform

Nathan Haug

1 product

Webform

Configuration A

26 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nathan Haug Webform	Up to 6.x-3.18
Nathan Haug Webform	Version 6.x-3.0
Nathan Haug Webform	Version 6.x-3.0 beta1
Nathan Haug Webform	Version 6.x-3.0 beta2
Nathan Haug Webform	Version 6.x-3.0 beta3
Nathan Haug Webform	Version 6.x-3.0 beta4
Nathan Haug Webform	Version 6.x-3.0 beta5
Nathan Haug Webform	Version 6.x-3.0 beta6
Nathan Haug Webform	Version 6.x-3.10
Nathan Haug Webform	Version 6.x-3.11
Nathan Haug Webform	Version 6.x-3.12
Nathan Haug Webform	Version 6.x-3.13
Nathan Haug Webform	Version 6.x-3.14
Nathan Haug Webform	Version 6.x-3.15
Nathan Haug Webform	Version 6.x-3.16
Nathan Haug Webform	Version 6.x-3.17
Nathan Haug Webform	Version 6.x-3.1
Nathan Haug Webform	Version 6.x-3.2
Nathan Haug Webform	Version 6.x-3.3
Nathan Haug Webform	Version 6.x-3.4
Nathan Haug Webform	Version 6.x-3.5
Nathan Haug Webform	Version 6.x-3.6
Nathan Haug Webform	Version 6.x-3.7
Nathan Haug Webform	Version 6.x-3.8
Nathan Haug Webform	Version 6.x-3.9
Nathan Haug Webform	Version 6.x-3.x dev