The Search Autocomplete module 7.x-2.x before 7.x-2.4 for Drupal does not properly restrict access to the module admin page, which allows remote attackers to disable an autocompletion or change the priority order via unspecified vectors.
CPE | Name | Operator | Version |
---|---|---|---|
search_autocomplete | eq | 7.120.20 | |
search_autocomplete | eq | 7.120.21 | |
search_autocomplete | eq | 7.120.23 | |
search_autocomplete | eq | 7.x-2.x dev |