Unrated severityNVD Advisory· Published Feb 13, 2009· Updated Apr 23, 2026
CVE-2009-0575
CVE-2009-0575
Description
Cross-site scripting (XSS) vulnerability in the theme_views_bulk_operations_confirmation function in views_bulk_operations.module in Views Bulk Operations 5.x before 5.x-1.3 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to node titles. NOTE: some of these details are obtained from third party information.
Affected products
10cpe:2.3:a:drupal:views_bulk_operations:*:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:drupal:views_bulk_operations:*:*:*:*:*:*:*:*range: <=5.x-1.2
- cpe:2.3:a:drupal:views_bulk_operations:5.x-1.0:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:views_bulk_operations:5.x-1.0beta1:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:views_bulk_operations:5.x-1.0beta3:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:views_bulk_operations:5.x-1.0beta4:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:views_bulk_operations:5.x-1.0beta5:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:views_bulk_operations:5.x-1.1:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:views_bulk_operations:6.x-1.0:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:views_bulk_operations:6.x-1.1:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:views_bulk_operations:6.x-1.2:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- drupal.org/node/369223nvdPatchVendor Advisory
- www.securityfocus.com/bid/33622nvdPatch
- secunia.com/advisories/33836nvdVendor Advisory
- osvdb.org/51751nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/48516nvd
News mentions
0No linked articles in our index yet.