| Package | Affected versions | Patched versions |
|---|---|---|
| drupal | = 4.6.0= 4.6.1= 4.6.2= 4.6.3= 4.6.4= 4.6.5= 4.6.6= 4.6.7= 4.6.8= 4.6.9= 4.7.0= 4.7.1= 4.7.2= 4.7.3 |
Multiple cross-site scripting (XSS) vulnerabilities in the XML parser in Drupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allow remote attackers to inject arbitrary web script or HTML via a crafted RSS feed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free