Medium severity6.1NVD Advisory· Published Nov 25, 2019· Updated Jun 16, 2026
CVE-2011-3373
CVE-2011-3373
Description
Drupal Views Builk Operations (VBO) module 6.x-1.0 through 6.x-1.10 does not properly escape the vocabulary help when the vocabulary has had user tagging enabled and the "Modify node taxonomy terms" action is used. A remote attacker could provide a specially-crafted URL that could lead to cross-site scripting (XSS) attack.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:drupal:views_builk_operations:*:*:*:*:*:*:*:*Range: >=6.x-1.0,<=6.x1.10
- Range: 6.x-1.0 through 6.x-1.10
- drupal6-views_bulk_operations/drupal6-views_bulk_operationsv5Range: 6.x-1.0 through 6.x-1.10
Patches
Vulnerability mechanics
References
4- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
- www.openwall.com/lists/oss-security/2011/09/22/4nvdMailing ListThird Party Advisory
- www.securityfocus.com/bid/49727nvdThird Party AdvisoryVDB Entry
- access.redhat.com/security/cve/cve-2011-3373nvdBroken Link
News mentions
0No linked articles in our index yet.