CVE-2010-2125

no score yetEPSS 1.3%

systemseed rotor: no CVSS score yet. EPSS 1.3% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in the Rotor Banner module 5.x before 5.x-1.8 and 6.x before 6.x-2.5 for Drupal allow remote authenticated users, with "create rotor item" or "edit any rotor item" privileges, to inject arbitrary web script or HTML via the (1) srs, (2) title, or (3) alt image attribute.

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2010-06-01
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

systemseed:rotor

References

http://drupal.org/node/803930
http://secunia.com/advisories/39883
http://www.osvdb.org/64770
https://exchange.xforce.ibmcloud.com/vulnerabilities/58719
http://drupal.org/node/803930

Check your stack JSON