Unrated severityNVD Advisory· Published Jun 18, 2014· Updated Jun 17, 2026
CVE-2014-4303
CVE-2014-4303
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Touch theme 7.x-1.x before 7.x-1.9 for Drupal allow remote authenticated users with the Administer themes permission to inject arbitrary web script or HTML via vectors related to the (1) Twitter and (2) Facebook username settings.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10cpe:2.3:a:drupac:touch:7.x-1.0:*:*:*:*:drupal:*:*+ 9 more
- cpe:2.3:a:drupac:touch:7.x-1.0:*:*:*:*:drupal:*:*
- cpe:2.3:a:drupac:touch:7.x-1.1:*:*:*:*:drupal:*:*
- cpe:2.3:a:drupac:touch:7.x-1.2:*:*:*:*:drupal:*:*
- cpe:2.3:a:drupac:touch:7.x-1.3:*:*:*:*:drupal:*:*
- cpe:2.3:a:drupac:touch:7.x-1.4:*:*:*:*:drupal:*:*
- cpe:2.3:a:drupac:touch:7.x-1.5:*:*:*:*:drupal:*:*
- cpe:2.3:a:drupac:touch:7.x-1.6:*:*:*:*:drupal:*:*
- cpe:2.3:a:drupac:touch:7.x-1.7:*:*:*:*:drupal:*:*
- cpe:2.3:a:drupac:touch:7.x-1.8:*:*:*:*:drupal:*:*
- (no CPE)range: >=7.x-1.0, <7.x-1.9
Patches
Vulnerability mechanics
References
4- drupal.org/node/2269483nvdPatchThird Party Advisory
- drupal.org/node/2284415nvdPatchThird Party Advisory
- secunia.com/advisories/58828nvdPermissions RequiredThird Party Advisory
- www.securityfocus.com/bid/68045nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.