CVE-2010-2724: Cross-site scripting (XSS) vulnerability in the Hierarchical Select module 5.x before 5.x-3.2 and 6.x befor...

Security readout for executives and security teams

CVE-2010-2724 is an XSS issue in the Drupal Hierarchical Select module. An authenticated user with administer taxonomy permissions could inject script or HTML through the hierarchical_select form. The source bundle does not provide CVSS, exploitation evidence, or detailed impact scope. Exposure is most likely on legacy Drupal 5 or Drupal 6 sites using vulnerable Hierarchical Select module versions and granting administer taxonomy permissions beyond fully trusted administrators. Treat this as a targeted legacy-application risk, not a broad internet worm risk. Prioritize if the organization still runs Drupal 5 or 6 with delegated taxonomy administration. Mitigation focus: Upgrade Hierarchical Select to 5.x-3.2 or 6.x-3.2, as applicable.; Check the Drupal advisory for any additional vendor guidance.; Remove unnecessary administer taxonomy permissions from non-administrator accounts..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.