CVE-2008-0276

MEDIUM 4.3CVE-2008-0276 · Published 15/01/2008 · updated 16/06/2026

In short

CVE-2008-0276 is a MEDIUM (CVSS 4.3) vulnerability affecting drupal (drupal).
Chance of exploitation in the next 30 days (EPSS): 0.84%, higher than 58.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
drupal drupal	`= 4.0.0= 4.1.0= 4.2.0_rc= 4.4= 4.4.1= 4.4.2= 4.4.3= 4.5= 4.5.1= 4.5.2= 4.5.3= 4.5.4= 4.5.5= 4.5.6= 4.5.7= 4.5.8= 4.6= 4.6.1= 4.6.10= 4.6.11= 4.6.2= 4.6.3= 4.6.4= 4.6.5= 4.6.6= 4.6.7= 4.6.8= 4.6.9= 4.7= 4.7.1= 4.7.10= 4.7.2= 4.7.3= 4.7.4= 4.7.5= 4.7.6= 4.7.7= 4.7.8= 4.7.9= 4.7_rev_1.15= 4.7_rev_1.2= 5.0= 5.1= 5.1_rev1.1= 5.2= 5.3= 5.4= 5.5.`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the Devel module before 5.x-0.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via a site variable, related to lack of escaping of the variable table.

References

More vulnerabilities in drupal

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

drupal

= 4.0.0= 4.1.0= 4.2.0_rc= 4.4= 4.4.1= 4.4.2= 4.4.3= 4.5= 4.5.1= 4.5.2= 4.5.3= 4.5.4= 4.5.5= 4.5.6= 4.5.7= 4.5.8= 4.6= 4.6.1= 4.6.10= 4.6.11= 4.6.2= 4.6.3= 4.6.4= 4.6.5= 4.6.6= 4.6.7= 4.6.8= 4.6.9= 4.7= 4.7.1= 4.7.10= 4.7.2= 4.7.3= 4.7.4= 4.7.5= 4.7.6= 4.7.7= 4.7.8= 4.7.9= 4.7_rev_1.15= 4.7_rev_1.2= 5.0= 5.1= 5.1_rev1.1= 5.2= 5.3= 5.4= 5.5.

No fix yet

More vulnerabilities in drupal

See all →