← Database

CVE-2009-4829

LOW CVSS: 2.1 Published: 2010-04-27 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the Automated Logout module 6.x-1.x before 6.x-1.7 and 6.x-2.x before 6.x-2.3 for Drupal allows remote authenticated users with administer autologout privileges to inject arbitrary web script or HTML via unspecified vectors.

Affected Platforms

Drupal DrupalJohn Vandervort AutologoutJames Glasgow Autologout

Weakness Type

CWE-79

References