Lucene search
HistoryJun 15, 2015 - 2:59 p.m.
CVE-2015-4370
cve-2015-4370
cross-site scripting
xss vulnerability
site documentation module
drupal
remote authenticated users
web script
html
taxonomy terms
nvd
5.4 Medium
AI Score
Confidence
High
3.5 Low
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
41.8%
Cross-site scripting (XSS) vulnerability in the Site Documentation module before 6.x-1.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to taxonomy terms.
Affected configurations
Node
site_documentation_projectsite_documentationRange≤6.x-1.4drupal
Related
drupal
drupal
SA-CONTRIB-2015-074 - Site Documentation - Cross Site Scripting (XSS)
2015-03-11 00:00:00
nvd
nvd
CVE-2015-4370
2015-06-15 14:59:29
prion
prion
Cross site scripting
2015-06-15 14:59:00
cvelist
cvelist
CVE-2015-4370
2015-06-15 14:00:00
5.4 Medium
AI Score
Confidence
High
3.5 Low
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
41.8%
Related for CVE-2015-4370