Vulnerabilities > Drupal > Drupal > 5.12
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2008-03-04 | CVE-2008-1133 | Cross-Site Scripting vulnerability in Drupal The Drupal.checkPlain function in Drupal 6.0 only escapes the first instance of a character in ECMAScript, which allows remote attackers to conduct cross-site scripting (XSS) attacks. | 4.3 |