Vulnerabilities > John Vandervort

DATE CVE VULNERABILITY TITLE RISK
2010-04-27 CVE-2009-4829 Cross-Site Scripting vulnerability in multiple products
Cross-site scripting (XSS) vulnerability in the Automated Logout module 6.x-1.x before 6.x-1.7 and 6.x-2.x before 6.x-2.3 for Drupal allows remote authenticated users with administer autologout privileges to inject arbitrary web script or HTML via unspecified vectors.
network
high complexity
james-glasgow john-vandervort drupal CWE-79
2.1