CVE-2013-4275
Medium
Description
Cross-site scripting (XSS) vulnerability in the zen_breadcrumb function in template.php in the Zen theme 6.x-1.x, 7.x-3.x before 7.x-3.2, and 7.x-5.x before 7.x-5.4 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via the breadcrumb separator field.
SeverityMedium
CVSS5.4
Exploit probability—
ProductZen
PublishedNov 13, 2019
First seenNov 13, 2019
How to fix
Update
- zen_project zen7.x-3.2, 7.x-5.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zen_project zen | 6.x-1.0 ≤ v ≤ 6.x-1.3, 7.x-3.0 ≤ v < 7.x-3.2, 7.x-5.0 ≤ v < 7.x-5.4 | 7.x-3.2, 7.x-5.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.