CVE-2006-4355

LOW 2.6CVE-2006-4355 · Published 27/08/2006 · updated 16/06/2026

In short

CVE-2006-4355 is a LOW (CVSS 2.6) vulnerability affecting drupal easylinks module (drupal).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
drupal easylinks module drupal	`= 4.7= 4.7.0= 4.7.1= 4.7.2`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Drupal Easylinks Module (easylinks.module) 4.7 before 1.5.2.1 2006/08/19 12:02:27 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

drupal.org/node/80087 · Patch
secunia.com/advisories/21603 · Vendor Advisory
securityfocus.com/bid/19670 · Patch
vupen.com/english/advisories/2006/3365
exchange.xforce.ibmcloud.com/vulnerabilities/28525

More vulnerabilities in drupal easylinks module

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free