CVE-2014-4303

Multiple cross-site scripting (XSS) vulnerabilities in the Touch theme 7.x-1.x before 7.x-1.9 for Drupal allow remote authenticated users with the Administer themes permission to inject arbitrary web script or HTML via vectors related to the (1) Twitter and (2) Facebook username settings.

• CWE-79

• http://secunia.com/advisories/58828Permissions Required, Third Party Advisory
• http://www.securityfocus.com/bid/68045Third Party Advisory, VDB Entry
• https://drupal.org/node/2269483Patch, Third Party Advisory
• https://drupal.org/node/2284415Patch, Third Party Advisory
• http://secunia.com/advisories/58828Permissions Required, Third Party Advisory
• http://www.securityfocus.com/bid/68045Third Party Advisory, VDB Entry
• https://drupal.org/node/2269483Patch, Third Party Advisory
• https://drupal.org/node/2284415Patch, Third Party Advisory

Published

Jun 18, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-4297Unspecified vulnerability in the JPublisher component in Ora…
• CVE-2014-4298Unspecified vulnerability in the SQLJ component in Oracle Da…
• CVE-2014-4299Unspecified vulnerability in the SQLJ component in Oracle Da…
• CVE-2014-4300Unspecified vulnerability in the SQLJ component in Oracle Da…
• CVE-2014-4301Multiple cross-site scripting (XSS) vulnerabilities in the r…
• CVE-2014-4302Cross-site scripting (XSS) vulnerability in rating/rating.ph…
• CVE-2014-4304Cross-site scripting (XSS) vulnerability in browse.php in SQ…
• CVE-2014-4305Multiple SQL injection vulnerabilities in NICE Recording eXp…
• CVE-2014-4306Directory traversal vulnerability in logs-x.php in WebTitan …
• CVE-2014-4307SQL injection vulnerability in categories-x.php in WebTitan …
• CVE-2014-4308Multiple cross-site scripting (XSS) vulnerabilities in NICE …
• CVE-2014-4309Multiple cross-site scripting (XSS) vulnerabilities in Openf…