Lucene search
HistoryJun 15, 2015 - 2:59 p.m.
CVE-2015-4365
cve-2015-4365
cross-site scripting
xss
taxonomy accordion
drupal
nvd
security vulnerability.
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
5.4 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
39.9%
Cross-site scripting (XSS) vulnerability in the Taxonomy Accordion module for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to taxonomy terms.
Affected configurations
Node
taxonomy_accordion_projecttaxonomy_accordiondrupal
| CPE | Name | Operator | Version |
|---|---|---|---|
| taxonomy_accordion_project:taxonomy_accordion | taxonomy accordion project taxonomy accordion | eq | * |
Related
prion
prion
Cross site scripting
2015-06-15 14:59:00
cvelist
cvelist
CVE-2015-4365
2015-06-15 14:00:00
nvd
nvd
CVE-2015-4365
2015-06-15 14:59:21
drupal
drupal
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
5.4 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
39.9%
Related for CVE-2015-4365