CVE-2009-4559

Severity: low (CVSS 3.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-01-04 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in the Submitted By module 6.x before 6.x-1.3 for Drupal allows remote authenticated users, with "administer content types" privileges, to inject arbitrary web script or HTML via an input string for "submitted by" text.

Affected products

Nanwich Submitted By: 6.x-1.0, 6.x-1.1, 6.x-1.2, 6.x-1.x-dev

References

http://drupal.org/node/520372
http://www.securityfocus.com/bid/35708
https://exchange.xforce.ibmcloud.com/vulnerabilities/51788
http://drupal.org/node/520372
http://www.securityfocus.com/bid/35708
https://exchange.xforce.ibmcloud.com/vulnerabilities/51788

Get alerted when CVE-2009-4559 or the next vulnerability affects your stack