CVE-2010-1303: Jim Berry Taxonomy Filter

Low severity, CVSS 2.1. EPSS: 1.3% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in the Taxonomy Filter module 6.x before 6.x-1.1 for Drupal allow remote authenticated users, with administer taxonomy permissions or create node permissions when free tagging is enabled, to inject arbitrary web script or HTML via vocabulary (1) names, (2) terms, and (3) filter menus.

Affected products

• Jim Berry Taxonomy Filter: version 6.x-1.0 only; version 6.x-1.x-dev only

Published 2010-04-08. Last modified 2026-06-16.