Servers and applications
CVE-2006-2833
Cross-site scripting (XSS) vulnerability in the taxonomy module in Drupal 4.6.8 and 4.7.2 allows remote attackers to inject arbitrary web script or HTML via inputs that are not properly validated when the page title is output, possibly involving the $names variable.
- Severity
- Low 2.6
- Published
- 6 Jun 2006
- Last changed
- 16 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Exploit chance
- 2.5% in the next 30 daysHigher than 85% of CVEs. EPSS by FIRST, 12 Nov 2026
- Attack
- Over the network · Only under certain conditions · No login needed
- Attacker can
- Change some data
- CVSS vector
AV:N/AC:H/Au:N/C:N/I:P/A:N- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
DrupalServers and applications · cpe:a:drupal:drupal |
|