CVE-2010-1303

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-04-08 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Taxonomy Filter module 6.x before 6.x-1.1 for Drupal allow remote authenticated users, with administer taxonomy permissions or create node permissions when free tagging is enabled, to inject arbitrary web script or HTML via vocabulary (1) names, (2) terms, and (3) filter menus.

Affected products

Jim Berry Taxonomy Filter: 6.x-1.0, 6.x-1.x-dev

References

http://drupal.org/node/622096
http://drupal.org/node/758756
http://secunia.com/advisories/39220
http://www.osvdb.org/63425
https://exchange.xforce.ibmcloud.com/vulnerabilities/57445
http://drupal.org/node/622096
http://drupal.org/node/758756
http://secunia.com/advisories/39220
http://www.osvdb.org/63425
https://exchange.xforce.ibmcloud.com/vulnerabilities/57445

Get alerted when CVE-2010-1303 or the next vulnerability affects your stack