CVE-2010-1362

Cross-site scripting (XSS) vulnerability in the Own Term module 6.x-1.0 for Drupal allows remote authenticated users, with "create additional terms" privileges, to inject arbitrary web script or HTML via the term description field in a term listing page.

• CWE-79

• http://drupal.org/node/683544Patch
• http://drupal.org/node/683576Patch, Vendor Advisory
• http://secunia.com/advisories/38208Vendor Advisory
• http://www.securityfocus.com/bid/37788
• http://drupal.org/node/683544Patch
• http://drupal.org/node/683576Patch, Vendor Advisory
• http://secunia.com/advisories/38208Vendor Advisory
• http://www.securityfocus.com/bid/37788

Published

Apr 13, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1356Unspecified vulnerability on the TANDBERG Video Communicatio…
• CVE-2010-1357Cross-site scripting (XSS) vulnerability in editors/logindia…
• CVE-2010-1358Cross-site scripting (XSS) vulnerability in the Bibliography…
• CVE-2010-1359SQL injection vulnerability in bluegate_seo.inc.php in the D…
• CVE-2010-1360Multiple PHP remote file inclusion vulnerabilities in FAQEng…
• CVE-2010-1361Cross-site scripting (XSS) vulnerability in shop/USER_ARTIKE…
• CVE-2010-1363SQL injection vulnerability in the JProjects (com_j-projects…
• CVE-2010-1364SQL injection vulnerability in index.php in Uiga Personal Po…
• CVE-2010-1365SQL injection vulnerability in index.php in Uiga Fan Club, a…
• CVE-2010-1366Multiple SQL injection vulnerabilities in admin/admin_login.…
• CVE-2010-1367Multiple cross-site scripting (XSS) vulnerabilities in admin…
• CVE-2010-1368SQL injection vulnerability in index.php in GameScript (GS) …