CVE-2011-3373

score

<0.1

cvss

6.1

epss

1.3%

published

2019-11-25

kev added

—

first seen

2026-10-21

Drupal Views Bulk Operations (VBO) module 6.x-1.0 through 6.x-1.10 contains a reflected cross-site scripting caused by improper escaping of vocabulary help when user tagging is enabled and 'Modify node taxonomy terms' action is used, letting remote attackers execute malicious scripts via crafted URLs.