Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2009-4524

Cross-site scripting (XSS) vulnerability in the RealName module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via a realname (aka real name) element.

CVSS 2.0 · 4.3 Medium EPSS 1.2% KEV · Not listed
Vendors
Drupal Nancy Wichmann
Products
Drupal Realname
CVE-2012-2298

Multiple cross-site scripting (XSS) vulnerabilities in the RealName module 6.x-1.x before 6.x-1.5 for Drupal allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) "user names in page titles" and (2) "autocomplete callbacks."

CVSS 2.0 · 4.3 Medium EPSS 2.4% KEV · Not listed
Vendors
Drupal Nancy Wichmann
Products
Drupal Realname Realname