← Back

Smart Breadcrumb

smart_breadcrumb

Vendor: Christopher Mitchell • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Christopher Mitchell
1Smart Breadcrumb
Apr 29, 2026
Jun 27, 2012
N/A· v4
N/A· v3
2.1 LOW· v2
The filter_titles function in the Smart Breadcrumb module 6.x-1.x before 6.x-1.3 for Drupal does not properly convert a title to plain-text, which allows remote authenticated users with create or edit node permissions to...Show more
The filter_titles function in the Smart Breadcrumb module 6.x-1.x before 6.x-1.3 for Drupal does not properly convert a title to plain-text, which allows remote authenticated users with create or edit node permissions to conduct cross-site scripting (XSS) attacks via the title parameter.Show less