CVE-2015-6754

2015-08-3119:59:02

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

2.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:S/C:N/I:P/A:N

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

30.9%

JSON

Cross-site scripting (XSS) vulnerability in the administration interface in the Path Breadcrumbs module 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the “Administer Path Breadcrumbs” permission to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

Nvd

Node

path_breadcrumbs_projectpath_breadcrumbsMatch7.x-3.0drupal

path_breadcrumbs_projectpath_breadcrumbsMatch7.x-3.1drupal

path_breadcrumbs_projectpath_breadcrumbsMatch7.x-3.2drupal

VendorProductVersionCPE
path_breadcrumbs_projectpath_breadcrumbs7.x-3.0cpe:2.3:a:path_breadcrumbs_project:path_breadcrumbs:7.x-3.0:*:*:*:*:drupal:*:*
path_breadcrumbs_projectpath_breadcrumbs7.x-3.1cpe:2.3:a:path_breadcrumbs_project:path_breadcrumbs:7.x-3.1:*:*:*:*:drupal:*:*
path_breadcrumbs_projectpath_breadcrumbs7.x-3.2cpe:2.3:a:path_breadcrumbs_project:path_breadcrumbs:7.x-3.2:*:*:*:*:drupal:*:*

Vendor	Product	Version	CPE
path_breadcrumbs_project	path_breadcrumbs	7.x-3.0	cpe:2.3:a:path_breadcrumbs_project:path_breadcrumbs:7.x-3.0:::::drupal::
path_breadcrumbs_project	path_breadcrumbs	7.x-3.1	cpe:2.3:a:path_breadcrumbs_project:path_breadcrumbs:7.x-3.1:::::drupal::
path_breadcrumbs_project	path_breadcrumbs	7.x-3.2	cpe:2.3:a:path_breadcrumbs_project:path_breadcrumbs:7.x-3.2:::::drupal::