Unrated severityNVD Advisory· Published Feb 13, 2009· Updated Jun 16, 2026
CVE-2009-0575
CVE-2009-0575
Description
Cross-site scripting (XSS) vulnerability in the theme_views_bulk_operations_confirmation function in views_bulk_operations.module in Views Bulk Operations 5.x before 5.x-1.3 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to node titles. NOTE: some of these details are obtained from third party information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
11cpe:2.3:a:drupal:views_bulk_operations:*:*:*:*:*:*:*:*+ 10 more
- cpe:2.3:a:drupal:views_bulk_operations:*:*:*:*:*:*:*:*range: <=5.x-1.2
- cpe:2.3:a:drupal:views_bulk_operations:5.x-1.0:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:views_bulk_operations:5.x-1.0beta1:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:views_bulk_operations:5.x-1.0beta3:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:views_bulk_operations:5.x-1.0beta4:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:views_bulk_operations:5.x-1.0beta5:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:views_bulk_operations:5.x-1.1:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:views_bulk_operations:6.x-1.0:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:views_bulk_operations:6.x-1.1:*:*:*:*:*:*:*
- cpe:2.3:a:drupal:views_bulk_operations:6.x-1.2:*:*:*:*:*:*:*
- (no CPE)range: 5.x < 5.x-1.3, 6.x < 6.x-1.4
Patches
Vulnerability mechanics
References
5- drupal.org/node/369223nvdPatchVendor Advisory
- www.securityfocus.com/bid/33622nvdPatch
- secunia.com/advisories/33836nvdVendor Advisory
- osvdb.org/51751nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/48516nvd
News mentions
0No linked articles in our index yet.