Loading...
Loading...
Cross-site scripting (XSS) vulnerability in the Support Timer module 6.x-1.x before 6.x-1.4 for Drupal allows remote authenticated users with the "track time spent" permission to inject arbitrary web script or HTML via unspecified vectors.
September 20, 2012
April 29, 2026
See which npm, PyPI, Go, and Maven packages are affected by CVE-2011-5188
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.