CVE-2009-4042
Cross-site scripting (XSS) vulnerability in the RootCandy theme 6.x before 6.x-1.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via the URI.
CVSS 2.0 · 4.3 Medium
EPSS 1.3%
KEV · Not listed
Vendors
Products