Lucene search
HistoryApr 21, 2015 - 4:59 p.m.
CVE-2015-3362
cve-2015-3362
cross-site scripting
xss
video module
drupal
wysiwyg
remote authenticated users
web script
html
node title
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
5.4 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
41.9%
Cross-site scripting (XSS) vulnerability in the Video module before 7.x-2.11 for Drupal, when using the video WYSIWYG plugin, allows remote authenticated users to inject arbitrary web script or HTML via a node title.
Affected configurations
Node
video_projectvideoRange≤7.x-2.10drupal
| CPE | Name | Operator | Version |
|---|---|---|---|
| video_project:video | video project video | le | 7.x-2.10 |
Related
nvd
nvd
CVE-2015-3362
2015-04-21 16:59:21
cvelist
cvelist
CVE-2015-3362
2015-04-21 16:00:00
prion
prion
Cross site scripting
2015-04-21 16:59:00
drupal
drupal
SA-CONTRIB-2015-018 - Video - Cross Site Scripting (XSS)
2015-01-14 00:00:00
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
5.4 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
41.9%
Related for CVE-2015-3362