CVE-2008-1978: Drupal Ubercart Module

Low severity, CVSS 3.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the Ubercart 5.x before 5.x-1.0 rc3 module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via node titles related to unspecified product features, a different vector than CVE-2008-1428.

Affected products

• Drupal Ubercart Module: up to and including 5-1.0

Published 2008-04-27. Last modified 2026-06-16.