Unrated severityNVD Advisory· Published Jul 8, 2011· Updated Jun 16, 2026

CVE-2010-4813

Description

Cross-site scripting (XSS) vulnerability in the Category Tokens module 6.x before 6.x-1.1 for Drupal allows remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML by editing or creating vocabulary names, which are not properly handled in token help.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Category Tokens Project/Category Tokens
cpe:2.3:a:category_tokens_project:category_tokens:6.x-1.0:*:*:*:*:drupal:*:*
Drupal/Category Tokensllm-create
Range: <6.x-1.1

Patches

Vulnerability mechanics

References

drupal.org/node/968176nvdPatchVendor Advisory
osvdb.org/69145nvd
secunia.com/advisories/42168nvd
www.securityfocus.com/bid/44780nvd
exchange.xforce.ibmcloud.com/vulnerabilities/63203nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000