CVE-2009-2610

LOW 3.5CVE-2009-2610 · Published 27/07/2009 · updated 16/06/2026

In short

CVE-2009-2610 is a LOW (CVSS 3.5) vulnerability affecting links package (scott courtney).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
links package scott_courtney	`= 5.x-1.11= 5.x-1.12= 5.x-1.12-beta1= 5.x-1.2= 5.x-1.4= 5.x-1.5= 5.x-1.6= 5.x-1.7= 5.x-1.8= 5.x-1.9= 5.x-1.x-dev= 6.x-1.0= 6.x-1.0-beta1= 6.x-1.0-beta10= 6.x-1.0-beta11= 6.x-1.0-beta12= 6.x-1.0-beta13= 6.x-1.0-beta14= 6.x-1.0-beta15= 6.x-1.0-beta2= 6.x-1.0-beta3= 6.x-1.0-beta5= 6.x-1.0-beta6= 6.x-1.0-beta7= 6.x-1.1= 6.x-1.x-dev`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the Links Related module in the Links Package 5.x before 5.x-1.13 and 6.x before 6.x-1.2, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via the title field.

References

drupal.org/node/501356 · Patch
drupal.org/node/501360 · Patch
drupal.org/node/502112 · Patch
osvdb.org/55326
secunia.com/advisories/35557 · Vendor Advisory
securityfocus.com/bid/35491

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free