CVE-2013-0319

Cross-site scripting (XSS) vulnerability in the Yandex.Metrics module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors related to the Yandex.Metrica service data.

• CWE-79

• http://drupal.org/node/1921340Patch
• http://drupal.org/node/1921342Patch
• http://drupal.org/node/1922400Patch, Vendor Advisory
• http://drupalcode.org/project/yandex_metrics.git/commitdiff/290b718Patch
• http://drupalcode.org/project/yandex_metrics.git/commitdiff/80bb901Patch
• http://www.openwall.com/lists/oss-security/2013/02/21/5
• http://drupal.org/node/1921340Patch
• http://drupal.org/node/1921342Patch
• http://drupal.org/node/1922400Patch, Vendor Advisory
• http://drupalcode.org/project/yandex_metrics.git/commitdiff/290b718Patch
• http://drupalcode.org/project/yandex_metrics.git/commitdiff/80bb901Patch
• http://www.openwall.com/lists/oss-security/2013/02/21/5

Published

Mar 27, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-0313The evm_update_evmxattr function in security/integrity/evm/e…
• CVE-2013-0314The GateIn Portal export/import gadget in JBoss Enterprise P…
• CVE-2013-0315The GateIn Portal export/import gadget in JBoss Enterprise P…
• CVE-2013-0316The Image module in Drupal 7.x before 7.20 allows remote att…
• CVE-2013-0317Cross-site scripting (XSS) vulnerability in the Manager Chan…
• CVE-2013-0318The admin page in the Banckle Chat module for Drupal does no…
• CVE-2013-0320Cross-site request forgery (CSRF) vulnerability in the Taxon…
• CVE-2013-0321Cross-site scripting (XSS) vulnerability in Views in the Ube…
• CVE-2013-0322Cross-site scripting (XSS) vulnerability in Views in the Ube…
• CVE-2013-0323Cross-site scripting (XSS) vulnerability in the Display Suit…
• CVE-2013-0324Cross-site scripting (XSS) vulnerability in the Rendered lin…
• CVE-2013-0325Multiple cross-site scripting (XSS) vulnerabilities in the V…