Total vulnerabilities in the database
The Drupal.checkPlain function in Drupal 6.0 only escapes the first instance of a character in ECMAScript, which allows remote attackers to conduct cross-site scripting (XSS) attacks.
| Software | From | Fixed in |
|---|---|---|
| drupal / drupal | 6.0 | 6.0.x |