CVE-2010-1584: Steven Jones Context

Low severity, CVSS 2.1. EPSS: 1.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the Context module before 6.x-2.0-rc4 for Drupal allows remote authenticated users, with Administer Blocks privileges, to inject arbitrary web script or HTML via a block description.

Affected products

• Steven Jones Context: up to and including 6.x-2.0; version 6.x-2.0 only

Published 2010-05-19. Last modified 2026-06-16.