Cross site scripting

2014-10-0818:55:00

PRIOn knowledge base

www.prio-n.com

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.7%

JSON

Cross-site scripting (XSS) vulnerability in the BlueMasters theme 7.x-2.x before 7.x-2.1 for Drupal allows remote authenticated users with the “administer themes” permission to inject arbitrary web script or HTML via vectors related to theme settings.

CPENameOperatorVersion
bluemasterseq7.120.20

CPE	Name	Operator	Version
	bluemasters	eq	7.120.20

References

secunia.com/advisories/57829

www.securityfocus.com/bid/66782

exchange.xforce.ibmcloud.com/vulnerabilities/92537

www.drupal.org/node/2236251

www.drupal.org/node/2236797