CVE-2010-1530

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-04-26 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Internationalization module 6.x before 6.x-1.4 for Drupal allow remote authenticated users, with translate interface or administer blocks privileges, to inject arbitrary web script or HTML via (1) strings used in block translation or (2) the untranslated input.

Affected products

Reyero I18N: 6.x-1.0, 6.x-1.0-beta1, 6.x-1.0-beta2, 6.x-1.0-beta3, 6.x-1.0-beta4, 6.x-1.0-beta6 (+4)

References

http://drupal.org/node/764906
http://drupal.org/node/764998
http://osvdb.org/63589
http://secunia.com/advisories/39361
http://www.securityfocus.com/bid/39304
http://drupal.org/node/764906
http://drupal.org/node/764998
http://osvdb.org/63589
http://secunia.com/advisories/39361
http://www.securityfocus.com/bid/39304

Get alerted when CVE-2010-1530 or the next vulnerability affects your stack