Approved changes feed: RSS · Atom

cpe:2.3:a:moshe_weitzman:organic_groups:5.x-7.3:*:*:*:*:*:*:*

part: a version: 5.x-7.3 update: *

VendorMoshe Weitzman (c0f0a938-700c-5d03-95fa-4d127c6c6b14)
ProductOrganic Groups (d647bb93-de5c-52bf-8b98-c87bedaaf17b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/gizra/og purl2cpe 2026-06-01 10:13:28.462117

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3652 vulnerable 2026-06-08 04:51:43.503350 Details available
Cross-site scripting (XSS) vulnerability in Organic Groups (OG) 5.x-7.x before 5.x-7.4, 5.x-8.x before 5.x-8.1, and 6.x-1.x before 6.x-1.4, a module for Drupal, allows remote authenticated users, with create or edit group nodes permissions, to inject arbitrary web script or HTML via the User-Agent HTTP header, a different issue than CVE-2008-3095.
Published: 2009-10-09T14:18:00.000Z
Updated: 2024-08-07T06:38:29.507Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.