CVE-2015-1621

2022-10-0316:15:50

mitre

www.cve.org

cve-2015-1621

cross-site scripting

webform prepopulate block

drupal

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.6%

JSON

Cross-site scripting (XSS) vulnerability in the Webform prepopulate block module before 7.x-3.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

References

www.openwall.com/lists/oss-security/2015/02/13/12

www.drupal.org/node/2423681

www.drupal.org/node/2424405