CVE-2007-5598

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.42%

Published

Oct 19, 2007

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in Weblinks for Drupal 4.7.x before 4.7.x-1.0 and 5.x before 5.x-1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Weaknesses (CWE)

CWE-79

Affected Products (2)

web_links_project · web_links (up to 4.7.x-1.0)vulnerable

web_links_project · web_links (up to 5.x-1.8)vulnerable

References (10)

http://drupal.org/node/184323

Vendor Advisory

http://osvdb.org/37904

Broken Link

http://secunia.com/advisories/27289

Third Party Advisory

http://www.securityfocus.com/bid/26125

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/37278

Third Party AdvisoryVDB Entry

http://drupal.org/node/184323

Vendor Advisory

http://osvdb.org/37904

Broken Link

http://secunia.com/advisories/27289

Third Party Advisory

http://www.securityfocus.com/bid/26125

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/37278

Third Party AdvisoryVDB Entry

KEV Catalog EPSS Scores Vendors All CVEs