Lucene search
MitreCVE-2015-8233HistoryNov 17, 2015 - 3:59 p.m.
CVE-2015-8233
2015-11-1715:59:26
CWE-79
mitre
web.nvd.nist.gov
25
cve
2015
8233
cross-site scripting
xss
vulnerability
mayo theme
drupal
remote administrators
administer themes permission
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
AI Score
5.8
Confidence
High
EPSS
0.001
Percentile
47.6%
Cross-site scripting (XSS) vulnerability in the MAYO theme 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.6 for Drupal allows remote administrators with the “Administer themes” permission to inject arbitrary web script or HTML via unspecified vectors related to theme settings.
Affected configurations
Node
mayo_projectmayoMatch7.x-1.0drupal
ORmayo_projectmayoMatch7.x-1.1drupal
ORmayo_projectmayoMatch7.x-1.2drupal
ORmayo_projectmayoMatch7.x-1.3drupal
ORmayo_projectmayoMatch7.x-2.0drupal
ORmayo_projectmayoMatch7.x-2.0alpha1drupal
ORmayo_projectmayoMatch7.x-2.0alpha2drupal
ORmayo_projectmayoMatch7.x-2.0alpha3drupal
ORmayo_projectmayoMatch7.x-2.0beta1drupal
ORmayo_projectmayoMatch7.x-2.0beta2drupal
ORmayo_projectmayoMatch7.x-2.0rc1drupal
ORmayo_projectmayoMatch7.x-2.0rc2drupal
ORmayo_projectmayoMatch7.x-2.1drupal
ORmayo_projectmayoMatch7.x-2.2drupal
ORmayo_projectmayoMatch7.x-2.3drupal
ORmayo_projectmayoMatch7.x-2.4drupal
ORmayo_projectmayoMatch7.x-2.5drupal
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mayo_project | mayo | 7.x-1.0 | cpe:2.3:a:mayo_project:mayo:7.x-1.0:*:*:*:*:drupal:*:* |
| mayo_project | mayo | 7.x-1.1 | cpe:2.3:a:mayo_project:mayo:7.x-1.1:*:*:*:*:drupal:*:* |
| mayo_project | mayo | 7.x-1.2 | cpe:2.3:a:mayo_project:mayo:7.x-1.2:*:*:*:*:drupal:*:* |
| mayo_project | mayo | 7.x-1.3 | cpe:2.3:a:mayo_project:mayo:7.x-1.3:*:*:*:*:drupal:*:* |
| mayo_project | mayo | 7.x-2.0 | cpe:2.3:a:mayo_project:mayo:7.x-2.0:*:*:*:*:drupal:*:* |
| mayo_project | mayo | 7.x-2.0 | cpe:2.3:a:mayo_project:mayo:7.x-2.0:alpha1:*:*:*:drupal:*:* |
| mayo_project | mayo | 7.x-2.0 | cpe:2.3:a:mayo_project:mayo:7.x-2.0:alpha2:*:*:*:drupal:*:* |
| mayo_project | mayo | 7.x-2.0 | cpe:2.3:a:mayo_project:mayo:7.x-2.0:alpha3:*:*:*:drupal:*:* |
| mayo_project | mayo | 7.x-2.0 | cpe:2.3:a:mayo_project:mayo:7.x-2.0:beta1:*:*:*:drupal:*:* |
| mayo_project | mayo | 7.x-2.0 | cpe:2.3:a:mayo_project:mayo:7.x-2.0:beta2:*:*:*:drupal:*:* |
Related
prion
prion
Cross site scripting
2015-11-17 15:59:00
cvelist
cvelist
CVE-2015-8233
2015-11-17 15:00:00
drupal
drupal
nvd
nvd
CVE-2015-8233
2015-11-17 15:59:26
CVSS2
2.6
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
AI Score
5.8
Confidence
High
EPSS
0.001
Percentile
47.6%
Related for CVE-2015-8233