CVE-2010-1074: Cross-site scripting (XSS) vulnerability in the Currency Exchange module before 6.x-1.2 for Drupal allows r...

Security readout for executives and security teams

CVE-2010-1074 is a cross-site scripting issue in the Drupal Currency Exchange module before 6.x-1.2. A remote attacker could inject script or HTML through unspecified input tied to watchdog logging. The provided sources do not show active exploitation or a CVSS score. Exposure is limited to Drupal sites that installed the Currency Exchange module in versions before 6.x-1.2. Organizations not running this contributed module are not indicated as affected by the supplied sources. Prioritize verification if legacy Drupal 6 sites remain in service. The issue is old and module-specific, but XSS can affect user trust and administrator sessions. Urgency depends on whether the vulnerable module exists in production. Mitigation focus: Inventory Drupal sites for the Currency Exchange module.; Upgrade the module to 6.x-1.2 or later if installed.; If upgrade status is unclear, check Drupal project advisory guidance..

Prepared

Jun 28, 2026, 09:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.