Unrated severityNVD Advisory· Published Mar 27, 2013· Updated Jun 16, 2026
CVE-2013-1783
CVE-2013-1783
Description
Cross-site scripting (XSS) vulnerability in the 3 slide gallery in page--front.tpl.php in the Business theme before 7.x-1.8 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
11cpe:2.3:a:devsaran:business:*:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:devsaran:business:*:*:*:*:*:*:*:*range: <=7.x-1.8
- cpe:2.3:a:devsaran:business:7.x-1.0:*:*:*:*:*:*:*
- cpe:2.3:a:devsaran:business:7.x-1.1:*:*:*:*:*:*:*
- cpe:2.3:a:devsaran:business:7.x-1.2:*:*:*:*:*:*:*
- cpe:2.3:a:devsaran:business:7.x-1.3:*:*:*:*:*:*:*
- cpe:2.3:a:devsaran:business:7.x-1.4:*:*:*:*:*:*:*
- cpe:2.3:a:devsaran:business:7.x-1.5:*:*:*:*:*:*:*
- cpe:2.3:a:devsaran:business:7.x-1.6:*:*:*:*:*:*:*
- cpe:2.3:a:devsaran:business:7.x-1.7:*:*:*:*:*:*:*
- cpe:2.3:a:devsaran:business:7.x-1.x:dev:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
8- drupal.org/node/1723246nvdPatch
- drupal.org/node/1929496nvdPatchVendor Advisory
- drupalcode.org/project/business.git/commitdiff/02f081fnvd
- osvdb.org/90685nvd
- secunia.com/advisories/52424nvd
- www.openwall.com/lists/oss-security/2013/02/28/3nvd
- www.securityfocus.com/bid/58216nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/82460nvd
News mentions
0No linked articles in our index yet.