Unrated severityNVD Advisory· Published Oct 9, 2009· Updated Apr 23, 2026
CVE-2009-3653
CVE-2009-3653
Description
Cross-site scripting (XSS) vulnerability in the additional links interface in XML Sitemap 5.x-1.6, a module for Drupal, allows remote authenticated users, with "administer site configuration" permission, to inject arbitrary web script or HTML via unspecified vectors, related to link path output.
Affected products
1- cpe:2.3:a:darren_oh:xml_sitemap:5.x-1.6:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- drupal.org/node/591724nvdPatchVendor Advisory
- drupal.org/node/591732nvdPatchVendor Advisory
- www.securityfocus.com/bid/36556nvdPatch
- exchange.xforce.ibmcloud.com/vulnerabilities/53572nvd
News mentions
0No linked articles in our index yet.