CVE-2011-3373

MEDIUM 6.1CVE-2011-3373 · Published 25/11/2019 · updated 16/06/2026

In short

CVE-2011-3373 is a MEDIUM (CVSS 6.1) vulnerability affecting views builk operations (drupal).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
views builk operations drupal	`≥ 6.x-1.0, ≤ 6.x1.10`	No fix yet

Description

Drupal Views Builk Operations (VBO) module 6.x-1.0 through 6.x-1.10 does not properly escape the vocabulary help when the vocabulary has had user tagging enabled and the "Modify node taxonomy terms" action is used. A remote attacker could provide a specially-crafted URL that could lead to cross-site scripting (XSS) attack.

References

access.redhat.com/security/cve/cve-2011-3373 · Broken Link
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
openwall.com/lists/oss-security/2011/09/22/4 · Mailing List
securityfocus.com/bid/49727 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free