CVE-2015-6754

2015-08-3119:00:00

mitre

www.cve.org

cross-site scripting

path breadcrumbs

drupal

remote authenticated users

administer permission

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

30.9%

JSON

Cross-site scripting (XSS) vulnerability in the administration interface in the Path Breadcrumbs module 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the “Administer Path Breadcrumbs” permission to inject arbitrary web script or HTML via unspecified vectors.

References

www.drupal.org/node/2533510

www.drupal.org/node/2533926