Unrated severityNVD Advisory· Published May 2, 2005· Updated Jun 16, 2026
CVE-2005-0682
CVE-2005-0682
Description
Cross-site scripting (XSS) vulnerability in common.inc in Drupal before 4.5.2 allows remote attackers to inject arbitrary web script or HTML via certain inputs.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:drupal:drupal:4.4.0:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:drupal:drupal:4.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:4.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:4.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:4.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:drupal:4.5.1:*:*:*:*:*:*:*
- (no CPE)range: <4.5.2
Patches
Vulnerability mechanics
References
3- drupal.org/drupal-4.5.2nvdPatchVendor Advisory
- drupal.org/files/drupal-4.5-xss-fix.patchnvdPatch
- secunia.com/advisories/14515nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.