← Database

CVE-2010-2030

MEDIUM CVSS: 4.3 Published: 2010-05-24 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the External Link Page module 5.x before 5.x-1.0 and 6.x before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors related to the administration and redirect pages.

Affected Platforms

Drupal DrupalAlan Palazzolo External Link Page

Weakness Type

CWE-79

References