CVE-2006-4947: Cross-site scripting (XSS) vulnerability in the Drupal 4.7 Search Keywords module before 1.15 2006/09/15 al...

Security readout for executives and security teams

This is an old XSS issue in the Drupal 4.7 Search Keywords module. A remote attacker could inject script or HTML because output was not properly validated. Sources do not provide CVSS, exact attack vectors, or evidence of active exploitation. Exposure is most plausible on legacy Drupal 4.7 sites with the Search Keywords module installed below version 1.15. Modern Drupal sites or installations without that module are not shown affected by the provided sources. Treat this as a legacy exposure check, not an emergency, unless Drupal 4.7 Search Keywords remains internet-facing. Unsupported CMS components should be retired or isolated because old XSS issues can still create account compromise and brand risk. Mitigation focus: Inventory Drupal 4.7 sites and Search Keywords module installations.; Upgrade Search Keywords module to version 1.15 or later where applicable.; Disable the module if it is unused and cannot be updated..

Prepared

Jun 29, 2026, 10:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.