CVE-2010-2030

https://notcve.org/view.php?id=CVE-2010-2030

24 May 2010 — Cross-site scripting (XSS) vulnerability in the External Link Page module 5.x before 5.x-1.0 and 6.x before 6.x-1.2 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors related to the administration and redirect pages. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el módulo External Link Page v5.x en versiones anteriores a la v5.x-1.0 y v6.x en versiones anteriores a la v6.x-1.2 de Drupal. Permite a atacantes remotos inyectar codigo de script web o cód... • http://drupal.org/node/803766 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •