Unrated severityNVD Advisory· Published Jun 18, 2014· Updated May 6, 2026
CVE-2014-4303
CVE-2014-4303
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Touch theme 7.x-1.x before 7.x-1.9 for Drupal allow remote authenticated users with the Administer themes permission to inject arbitrary web script or HTML via vectors related to the (1) Twitter and (2) Facebook username settings.
Affected products
9cpe:2.3:a:drupac:touch:7.x-1.0:*:*:*:*:drupal:*:*+ 8 more
- cpe:2.3:a:drupac:touch:7.x-1.0:*:*:*:*:drupal:*:*
- cpe:2.3:a:drupac:touch:7.x-1.1:*:*:*:*:drupal:*:*
- cpe:2.3:a:drupac:touch:7.x-1.2:*:*:*:*:drupal:*:*
- cpe:2.3:a:drupac:touch:7.x-1.3:*:*:*:*:drupal:*:*
- cpe:2.3:a:drupac:touch:7.x-1.4:*:*:*:*:drupal:*:*
- cpe:2.3:a:drupac:touch:7.x-1.5:*:*:*:*:drupal:*:*
- cpe:2.3:a:drupac:touch:7.x-1.6:*:*:*:*:drupal:*:*
- cpe:2.3:a:drupac:touch:7.x-1.7:*:*:*:*:drupal:*:*
- cpe:2.3:a:drupac:touch:7.x-1.8:*:*:*:*:drupal:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- drupal.org/node/2269483nvdPatchThird Party Advisory
- drupal.org/node/2284415nvdPatchThird Party Advisory
- secunia.com/advisories/58828nvdPermissions RequiredThird Party Advisory
- www.securityfocus.com/bid/68045nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.