CVE-2013-2177

Cross-site scripting (XSS) vulnerability in the Display Suite module 7.x-1.x before 7.x-1.7 and 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via an entity bundle label.

🔗 References (10)

• secalert@redhathttp://osvdb.org/94234
• secalert@redhathttp://seclists.org/fulldisclosure/2013/Jun/94
• secalert@redhathttps://drupal.org/node/2017639
• secalert@redhathttps://drupal.org/node/2017641
• secalert@redhathttps://drupal.org/node/2017933
• af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/94234
• af854a3a-2127-422b-91ae-364da2661108http://seclists.org/fulldisclosure/2013/Jun/94
• af854a3a-2127-422b-91ae-364da2661108https://drupal.org/node/2017639
• af854a3a-2127-422b-91ae-364da2661108https://drupal.org/node/2017641
• af854a3a-2127-422b-91ae-364da2661108https://drupal.org/node/2017933