Unrated severityNVD Advisory· Published Mar 27, 2013· Updated Jun 16, 2026
CVE-2013-0317
CVE-2013-0317
Description
Cross-site scripting (XSS) vulnerability in the Manager Change for Organic Groups (og_manager_change) module 7.x-2.x before 7.x-2.1 for Drupal might allow remote attackers to inject arbitrary web script or HTML via the username in the new manager autocomplete field.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:joe_haskins:og_manager_change:7.x-2.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:joe_haskins:og_manager_change:7.x-2.0:*:*:*:*:*:*:*
- cpe:2.3:a:joe_haskins:og_manager_change:7.x-2.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:joe_haskins:og_manager_change:7.x-2.x:dev:*:*:*:*:*:*
- Range: = 7.x-2.x (before 7.x-2.1)
Patches
Vulnerability mechanics
References
4- drupal.org/node/1915408nvdPatch
- drupal.org/node/1916312nvdPatchVendor Advisory
- drupalcode.org/project/og_manager_change.git/commitdiff/ab7152bnvdPatch
- www.openwall.com/lists/oss-security/2013/02/21/5nvd
News mentions
0No linked articles in our index yet.