What is GHSA-vhg8-x858-7wq6?

GHSA-vhg8-x858-7wq6 is a security advisory published by GitHub Security Advisories with Medium severity. Drupal Cross-site scripting (XSS) vulnerability

Which CVE IDs does GHSA-vhg8-x858-7wq6 cover?

GHSA-vhg8-x858-7wq6 covers the following CVE IDs: CVE-2016-7571. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-vhg8-x858-7wq6?

GHSA-vhg8-x858-7wq6 has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-vhg8-x858-7wq6?

GHSA-vhg8-x858-7wq6 affects 2 products, including: composer/drupal/core:\u003e= 8.0, \u003c 8.1.10; composer/drupal/drupal:\u003e= 8.0, \u003c 8.1.10.

GHSA-vhg8-x858-7wq6MediumCVSS 6.1

Drupal Cross-site scripting (XSS) vulnerability

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

April 23, 2024

🔗 CVE IDs covered (1)

CVE-2016-7571 →

📋 Description

Cross-site scripting (XSS) vulnerability in Drupal 8.x before 8.1.10 allows remote attackers to inject arbitrary web script or HTML via vectors involving an HTTP exception.

🎯 Affected products2

composer/drupal/core:>= 8.0, < 8.1.10
composer/drupal/drupal:>= 8.0, < 8.1.10

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2016-7571
https://www.drupal.org/SA-CORE-2016-004
http://www.securityfocus.com/bid/93101
http://www.securitytracker.com/id/1036886
https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2016-7571.yaml
https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2016-7571.yaml
https://github.com/advisories/GHSA-vhg8-x858-7wq6