Vulnerability Database

308,485

Total vulnerabilities in the database

CVE-2009-3780

Cross-site scripting (XSS) vulnerability in Abuse 5.x before 5.x-2.1 and 6.x before 6.x-1.1-alpha1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Published: Oct 26, 2009
Updated: Nov 9, 2025
CVE: CVE-2009-3780
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
ashok_modi / abuse	5.x-1.0-beta	5.x-1.0-beta.x
ashok_modi / abuse	5.x-1.x-dev	5.x-1.x-dev.x
ashok_modi / abuse	5.x-2.x-dev	5.x-2.x-dev.x

http://drupal.org/node/610784
http://drupal.org/node/610900
http://drupal.org/node/611078
http://secunia.com/advisories/37129
http://www.securityfocus.com/bid/36791
https://exchange.xforce.ibmcloud.com/vulnerabilities/53898

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo