VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 5, 2008· Updated Jun 16, 2026

CVE-2008-0576

CVE-2008-0576

Description

Cross-site scripting (XSS) vulnerability in the Project Issue Tracking module 5.x-2.x-dev before 20080130 in the 5.x-2.x series, 5.x-1.2 and earlier in the 5.x-1.x series, 4.7.x-2.6 and earlier in the 4.7.x-2.x series, and 4.7.x-1.6 and earlier in the 4.7.x-1.x series for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors that write to summary table pages.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Drupal/Project Issue Tracking Module3 versions
    cpe:2.3:a:drupal:project_issue_tracking_module:4.7:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:drupal:project_issue_tracking_module:4.7:*:*:*:*:*:*:*
    • cpe:2.3:a:drupal:project_issue_tracking_module:5:*:*:*:*:*:*:*
    • (no CPE)

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.