CVE-2013-1784: Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Clean Theme before 7.x-1.3 for Drupa...

Security readout for executives and security teams

CVE-2013-1784 is a cross-site scripting issue in the Drupal Clean Theme 3 slide gallery before version 7.x-1.3. It requires an authenticated user with the administer themes permission, so broad internet exploitation is less likely, but a compromised or malicious privileged account could inject script or HTML into the site administration context. Exposure is likely limited to Drupal 7 sites that installed Clean Theme versions before 7.x-1.3 and grant administer themes permission to users beyond tightly trusted administrators. Treat this as a targeted legacy Drupal hygiene issue, not an emergency internet-wide threat. Prioritize affected public or business-critical Drupal sites, especially where theme administration is delegated broadly. Mitigation focus: Upgrade Clean Theme to 7.x-1.3 or later where applicable.; Review Drupal advisory and project issue guidance before changing production sites.; Restrict administer themes permission to trusted administrators only..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.