CVE-2009-1823: Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions) module 5.x bef...

Security readout for executives and security teams

This is an old cross-site scripting issue in the Drupal Print module. A vulnerable site could allow a remote attacker to inject script or HTML through crafted character encoding behavior, mainly involving Internet Explorer 6 and 7 handling content as UTF-7. Exposure is most likely on legacy Drupal deployments still running the vulnerable Print module versions. Risk is lower where the module is absent, updated, or where affected legacy browsers are not in use. Prioritize remediation for public legacy Drupal sites that still use this module. The issue is old and not KEV-listed, but XSS can still affect user trust, sessions, and content integrity. Mitigation focus: Inventory Drupal sites for the Print module and its version.; Upgrade affected 5.x deployments to 5.x-4.7 or later.; Upgrade affected 6.x deployments to 6.x-1.7 or later..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.