CVE-2013-4275

MediumCVSS 5.4/10Last modified Jun 16, 2026

Description

Cross-site scripting (XSS) vulnerability in the zen_breadcrumb function in template.php in the Zen theme 6.x-1.x, 7.x-3.x before 7.x-3.2, and 7.x-5.x before 7.x-5.4 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via the breadcrumb separator field.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Zen	Zen theme	6.x-1.x; 7.x-3.x before 7.x-3.2; and 7.x-5.x before 7.x-5.4

References

http://seclists.org/fulldisclosure/2013/Aug/226Exploit, Mailing List, Third Party Advisory
http://www.madirish.net/?article=452Exploit, Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/08/22/2Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/61922Broken Link, Third Party Advisory, VDB Entry
https://drupal.org/node/2071055Release Notes, Third Party Advisory
https://drupal.org/node/2071065Release Notes, Third Party Advisory
https://drupal.org/node/2071157Third Party Advisory
https://drupal.org/node/754000Third Party Advisory
http://seclists.org/fulldisclosure/2013/Aug/226Exploit, Mailing List, Third Party Advisory
http://www.madirish.net/?article=452Exploit, Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/08/22/2Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/61922Broken Link, Third Party Advisory, VDB Entry
https://drupal.org/node/2071055Release Notes, Third Party Advisory
https://drupal.org/node/2071065Release Notes, Third Party Advisory
https://drupal.org/node/2071157Third Party Advisory
https://drupal.org/node/754000Third Party Advisory

Timeline

Published: Nov 13, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-42764.3Multiple stack-based buffer overflows in LittleCMS (aka lcms or liblcms) 1.19 and earlier allow remote attackers to cause a denial of servic CVE-2013-42773.3Svnserve in Apache Subversion 1.4.0 through 1.7.12 and 1.8.0 through 1.8.1 allows local users to overwrite arbitrary files or kill arbitrary CVE-2013-42783.5The "create an instance" API in OpenStack Compute (Nova) Folsom, Grizzly, and Havana does not properly enforce the os-flavor-access:is_publi CVE-2013-42795.0imapsync 1.564 and earlier performs a release check by default, which sends sensitive information (imapsync, operating system, and Perl vers CVE-2013-42805.5Insecure temporary file vulnerability in RedHat vsdm 4.9.6.CVE-2013-42815.5In Red Hat Openshift 1, weak default permissions are applied to the /etc/openshift/server_priv.pem file on the broker server, which could al CVE-2013-42825.0Stack-based buffer overflow in the reds_handle_ticket function in server/reds.c in SPICE 0.12.0 allows remote attackers to cause a denial of CVE-2013-42835.0ns-slapd in 389 Directory Server before 1.3.0.8 allows remote attackers to cause a denial of service (server crash) via a crafted Distinguis CVE-2013-42845.0Cumin, as used in Red Hat Enterprise MRG 2.4, allows remote attackers to cause a denial of service (CPU and memory consumption) via a crafte CVE-2013-42852.1A certain Gentoo patch for the PAM S/Key module does not properly clear credentials from memory, which allows local users to obtain sensitiv CVE-2013-42865.8Apache Tomcat before 6.0.39, 7.x before 7.0.47, and 8.x before 8.0.0-RC3, when an HTTP connector or AJP connector is used, does not properly CVE-2013-42874.3Algorithmic complexity vulnerability in Gem::Version::VERSION_PATTERN in lib/rubygems/version.rb in RubyGems before 1.8.23.1, 1.8.24 through