Drupal

Talk

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
3.5

CVE-2008-4152

  • EPSS 0.23%
  • Published 24.09.2008 05:41:39
  • Last modified 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in the Talk module 5.x before 5.x-1.3 and 6.x before 6.x-1.5, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via a node title.

5

CVE-2008-4153

  • EPSS 0.36%
  • Published 24.09.2008 05:41:39
  • Last modified 09.04.2025 00:30:58

The Talk module 5.x before 5.x-1.3 and 6.x before 6.x-1.5, a module for Drupal, does not perform access checks for a node before displaying comments, which allows remote attackers to obtain sensitive information.