CVE-2009-3779: Cross-site scripting (XSS) vulnerability in vCard 5.x before 5.x-1.4 and 6.x before 6.x-1.3, a module for D...

Security readout for executives and security teams

This is an old cross-site scripting issue in the Drupal vCard module. A vulnerable site could allow an attacker to inject script or HTML into pages that render vCard content. Business impact is mainly user session, trust, and content integrity risk on legacy Drupal deployments. Exposure is likely limited to legacy Drupal 5 or 6 sites with the vCard module installed at affected versions. Modern Drupal sites or installations without this module are not indicated as affected by the provided sources. Treat as a legacy exposure cleanup item unless affected Drupal 5 or 6 systems remain internet-facing. Prioritize quickly if those sites handle authenticated users, customer data, or trusted public content. Mitigation focus: Inventory Drupal sites for the vCard module and installed version.; Upgrade vCard 5.x to 5.x-1.4 or later, or 6.x to 6.x-1.3 or later.; If upgrade is not possible, consult Drupal project guidance for supported mitigation..

Prepared

Jun 28, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.