CVE-2013-4384

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-10-09 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in Google Site Search module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.10 for Drupal allows remote attackers to inject arbitrary web script or HTML by causing crafted data to be returned by the Google API.

Affected products

Google Site Search Project Google Site Search Module: 6.x-1.0, 6.x-1.0-rc1, 6.x-1.1, 6.x-1.2, 6.x-1.3, 6.x-1.x-dev (+13)

References

http://osvdb.org/97503
http://www.securityfocus.com/bid/62495
https://drupal.org/node/2092395
https://exchange.xforce.ibmcloud.com/vulnerabilities/87285
http://osvdb.org/97503
http://www.securityfocus.com/bid/62495
https://drupal.org/node/2092395
https://exchange.xforce.ibmcloud.com/vulnerabilities/87285

Get alerted when CVE-2013-4384 or the next vulnerability affects your stack