← Database

CVE-2010-2002

LOW CVSS: 2.1 Published: 2010-05-20 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the Wordfilter module 5.x before 5.x-1.1 and 6.x before 6.x-1.1 for Drupal allows remote authenticated users, with "administer words filtered" privileges, to inject arbitrary web script or HTML via the word list.

Affected Platforms

Drupal DrupalAddison Berry WordfilterJeff Warrington Wordfilter

Weakness Type

CWE-79

References