CVE-2013-2177

Published: Jun 25, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Display Suite module 7.x-1.x before 7.x-1.7 and 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via an entity bundle label.

Affected (16)

Products: Kristof De Jaeger: Display Suite

Kristof De Jaeger

1 product

Display Suite

Configuration A

16 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Kristof De Jaeger Display Suite	Version 7x-1.0-rc3
Kristof De Jaeger Display Suite	Version 7x-1.0
Kristof De Jaeger Display Suite	Version 7x-1.1
Kristof De Jaeger Display Suite	Version 7x-1.2
Kristof De Jaeger Display Suite	Version 7x-1.3
Kristof De Jaeger Display Suite	Version 7x-1.4
Kristof De Jaeger Display Suite	Version 7x-1.5
Kristof De Jaeger Display Suite	Version 7x-1.6
Kristof De Jaeger Display Suite	Version 7x-2.0-beta1
Kristof De Jaeger Display Suite	Version 7x-2.0-beta2
Kristof De Jaeger Display Suite	Version 7x-2.0-beta3
Kristof De Jaeger Display Suite	Version 7x-2.0-dev
Kristof De Jaeger Display Suite	Version 7x-2.0-rc1
Kristof De Jaeger Display Suite	Version 7x-2.0
Kristof De Jaeger Display Suite	Version 7x-2.1
Kristof De Jaeger Display Suite	Version 7x-2.2