CVE-2013-5964

Cross-site scripting (XSS) vulnerability in the administration page in the Flag module 7.x-3.x before 7.x-3.1 for Drupal allows remote authenticated users with the "Administer flags" permission to inject arbitrary web script or HTML via the flag title.

• CWE-79

• http://archives.neohapsis.com/archives/bugtraq/2013-08/0184.htmlPatch
• http://osvdb.org/96750
• http://seclists.org/fulldisclosure/2013/Aug/287Patch
• https://drupal.org/node/2075287Patch
• https://drupal.org/node/2076221Patch, Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2013-08/0184.htmlPatch
• http://osvdb.org/96750
• http://seclists.org/fulldisclosure/2013/Aug/287Patch
• https://drupal.org/node/2075287Patch
• https://drupal.org/node/2076221Patch, Vendor Advisory

Published

Sep 30, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-5958The Security component in Symfony 2.0.x before 2.0.25, 2.1.x…
• CVE-2013-5959Blue Coat ProxySG before 6.2.14.1, 6.3.x, 6.4.x, and 6.5 bef…
• CVE-2013-5960The authenticated-encryption feature in the symmetric-encryp…
• CVE-2013-5961Unrestricted file upload vulnerability in lazyseo.php in the…
• CVE-2013-5962Unrestricted file upload vulnerability in frames/upload-imag…
• CVE-2013-5963Unrestricted file upload vulnerability in multi.php in Simpl…
• CVE-2013-5965The Node View Permissions module 7.x-1.x before 7.x-1.2 for …
• CVE-2013-5966Cross-site scripting (XSS) vulnerability in ZK Framework bef…
• CVE-2013-5967Multiple SQL injection vulnerabilities in AlienVault Open So…
• CVE-2013-5968Cross-site scripting (XSS) vulnerability in CA SiteMinder 12…
• CVE-2013-5970hostd-vmdb in VMware ESXi 4.0 through 5.0 and ESX 4.0 throug…
• CVE-2013-5971Session fixation vulnerability in the vSphere Web Client Ser…