Unrated severityNVD Advisory· Published Oct 21, 2014· Updated Jun 17, 2026
CVE-2014-8376
CVE-2014-8376
Description
Cross-site scripting (XSS) vulnerability in the context administration sub-panel in the Site Banner module before 7.x-4.1 for Drupal allows remote authenticated users with the "Administer contexts" Context UI module permission to inject arbitrary web script or HTML via vectors related to context settings.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:site_banner_project:site_banner:*:*:*:*:*:drupal:*:*+ 1 more
- cpe:2.3:a:site_banner_project:site_banner:*:*:*:*:*:drupal:*:*range: <=7.x-4.0
- (no CPE)range: <7.x-4.1
Patches
Vulnerability mechanics
References
4- www.drupal.org/node/2324303nvdPatch
- www.drupal.org/node/2324689nvdVendor Advisory
- secunia.com/advisories/60758nvd
- www.securityfocus.com/bid/69343nvd
News mentions
0No linked articles in our index yet.