Cross-site scripting (XSS) vulnerability in the User Karma module 5.x before 5.x-1.13 and 6.x before 6.x-1.0-beta1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified messages.
2009-02-25T23:30:00.593
2025-04-09T00:30:58.490
Deferred
CVSSv2: 4.3 (MEDIUM)
AV:N/AC:M/Au:N/C:N/I:P/A:N
8.6
2.9
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | drupal | user_karma_module | ≤ 5.x-1.12 | Yes |
Application | drupal | user_karma_module | ≤ 6.x-1.xdev | Yes |
Application | drupal | user_karma_module | 5.x-1.1 | Yes |
Application | drupal | user_karma_module | 5.x-1.2 | Yes |
Application | drupal | user_karma_module | 5.x-1.3 | Yes |
Application | drupal | user_karma_module | 5.x-1.4 | Yes |
Application | drupal | user_karma_module | 5.x-1.5 | Yes |
Application | drupal | user_karma_module | 5.x-1.6 | Yes |
Application | drupal | user_karma_module | 5.x-1.7 | Yes |
Application | drupal | user_karma_module | 5.x-1.8 | Yes |
Application | drupal | user_karma_module | 5.x-1.9 | Yes |
Application | drupal | user_karma_module | 5.x-1.10 | Yes |
Application | drupal | user_karma_module | 5.x-1.xdev | Yes |
Application | joomla | joomla\! | * | No |