Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the Performance logging module in the Devel module 5.x before 5.x-1.3 and 6.x before 6.x-1.21 for Drupal allows remote authenticated users, with add url aliases and report access permissions, to inject arbitrary web script or HTML via crafted node paths in a URL.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Drupal中的Devel模块跨站脚本漏洞
Vulnerability Description
Drupal是很著名的开源内容管理平台，仿照了blog程序模式，但比普通的blog更灵活，可以做各种网站的内容管理平台。 Drupal中的Devel模块5.x-1.3之前的5.x版本和6.x-1.21之前的6.x版本中的Performance logging模块存在跨站脚本攻击漏洞。远程认证用户可以借助特制的URL节点路径添加URL别名和报告访问权限，注入任意web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A