{"id":"CVE-2024-34481","aliases":["EUVD-2024-34829","GHSA-638w-x7fx-cgrj","UBUNTU-CVE-2024-34481"],"status":"published","title":"drupal-wiki.com Drupal Wiki before 8.31.1 allows XSS via comments, captions, and image titles of...","description":"drupal-wiki.com Drupal Wiki before 8.31.1 allows XSS via comments, captions, and image titles of a Wiki page.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00625,"percentile":0.50483,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2024-07-05T00:00:00Z","modified":"2026-06-17T07:33:30Z","affected":[{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"drupal7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.23-1","7.24-1","7.24-2","7.26-1","7.26-1ubuntu0.1","7.26-1ubuntu0.1+esm1","7.26-1ubuntu0.1+esm2","7.26-1ubuntu0.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"drupal7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.38-1","7.41-1","7.44-1ubuntu1~16.04.0","7.44-1ubuntu1~16.04.0+esm1","7.44-1ubuntu1~16.04.0+esm2","7.44-1ubuntu1~16.04.0+esm3"]}],"products":[{"vendor":"drupal","product":"wiki"},{"vendor":"kontextwork","product":"drupal_wiki"}],"references":[{"url":"https://www.secuvera.de/advisories/secuvera-SA-2024-02.txt","tags":["x_transferred","Third Party Advisory","report"]},{"url":"https://drupal-wiki.com/drupal-wiki-update-8-31/","tags":["x_transferred","Release Notes","report"]},{"url":"https://seclists.org/fulldisclosure/2024/May/4","tags":["x_transferred","Mailing List","Third Party Advisory","report"]},{"url":"http://seclists.org/fulldisclosure/2024/May/4"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-34481"},{"url":"https://drupal-wiki.com/drupal-wiki-update-8-31"},{"url":"https://github.com/advisories/GHSA-638w-x7fx-cgrj"},{"url":"https://ubuntu.com/security/CVE-2024-34481","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-34481","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2024-34481","description":"drupal-wiki.com Drupal Wiki before 8.31.1 allows XSS via comments, captions, and image titles of a Wiki page.","status":"published","published":"2024-07-05T00:00:00Z","modified":"2025-11-04T17:20:44.029Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:34:23.516065Z"}],"euvd":[{"id":"EUVD-2024-34829","description":"drupal-wiki.com Drupal Wiki before 8.31.1 allows XSS via comments, captions, and image titles of a Wiki page.","status":"published","published":"2024-07-05T00:00:00Z","modified":"2025-11-04T17:20:44Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T19:49:25.004858Z"}],"ghsa":[{"id":"GHSA-638w-x7fx-cgrj","title":"drupal-wiki.com Drupal Wiki before 8.31.1 allows XSS via comments, captions, and image titles of...","description":"drupal-wiki.com Drupal Wiki before 8.31.1 allows XSS via comments, captions, and image titles of a Wiki page.","status":"published","published":"2024-07-05T03:30:42Z","modified":"2025-11-04T18:31:05Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:04:33.412684Z"}],"nvd":[{"id":"CVE-2024-34481","description":"drupal-wiki.com Drupal Wiki before 8.31.1 allows XSS via comments, captions, and image titles of a Wiki page.","status":"published","published":"2024-07-05T02:15:09.92Z","modified":"2026-06-17T07:33:30.483Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:10:10.545705Z"}],"osv":[{"id":"UBUNTU-CVE-2024-34481","description":"drupal-wiki.com Drupal Wiki before 8.31.1 allows XSS via comments, captions, and image titles of a Wiki page.","status":"published","published":"2024-07-05T02:15:00Z","modified":"2025-09-08T17:00:23Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T16:54:50.784131Z"}]}}