Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the Node Blocks module 5.x-1.1 and earlier, and 6.x-1.3 and earlier, a module for Drupal, allows remote authenticated users, with permissions to create or edit content and administer blocks, to inject arbitrary web script or HTML via the edit-title parameter (aka block title).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Drupal Node Block 模块 跨站脚本漏洞
Vulnerability Description
Node Blocks 模块 5.x-1.1及其早期版本，以及6.x-1.3及其早期版本中存在跨站脚本漏洞, Drupal的一个模块，使得具有创建或编辑目录及管理员板块的远程验证用户可以借助edit-title参数(版块名称)注入任意web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A