Lucene search
HistoryJun 15, 2015 - 2:59 p.m.
CVE-2015-4346
cve-2015-4346
cross-site scripting
xss
sms framework module
drupal
security vulnerability
nvd
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
60.4%
Cross-site scripting (XSS) vulnerability in the SMS Framework module 6.x-1.x before 6.x-1.1 for Drupal, when the “Send to phone” submodule is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to message previews.
Affected configurations
Node
sms_framework_projectsms_frameworkMatch6.x-1.0drupal
ORsms_framework_projectsms_frameworkMatch6.x-1.1drupal
ORsms_framework_projectsms_frameworkMatch6.x-2.0-alpha1drupal
ORsms_framework_projectsms_frameworkMatch6.x-2.x-devdrupal
Related
cvelist
cvelist
CVE-2015-4346
2015-06-15 14:00:00
prion
prion
Cross site scripting
2015-06-15 14:59:00
drupal
drupal
SA-CONTRIB-2015-054 - SMS Framework - Cross Site Scripting (XSS)
2015-02-25 00:00:00
nvd
nvd
CVE-2015-4346
2015-06-15 14:59:02
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
60.4%
Related for CVE-2015-4346