CVE-2009-1942

Severity: low (CVSS 3.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-06-05 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in the Quiz module 5.x, 6.x-2.x before 6.x-2.2, and 6.x-3.x before 6.x-3.0, a module for Drupal, allows remote authenticated users, with create quizzes or quiz questions access, to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Drupal Quiz: 5.x, 6.x-2.0, 6.x-2.0-alpha1, 6.x-2.0-alpha2, 6.x-2.0-beta1, 6.x-2.0-rc1 (+9)

References

http://drupal.org/node/481270
http://drupal.org/node/481274
http://drupal.org/node/481308
http://osvdb.org/54880
http://secunia.com/advisories/35345
http://www.securityfocus.com/bid/35199
http://drupal.org/node/481270
http://drupal.org/node/481274
http://drupal.org/node/481308
http://osvdb.org/54880
http://secunia.com/advisories/35345
http://www.securityfocus.com/bid/35199

Get alerted when CVE-2009-1942 or the next vulnerability affects your stack