Lucene search
PRIOn knowledge basePRION:CVE-2016-3144HistoryApr 15, 2016 - 3:59 p.m.
Cross site scripting
2016-04-1515:59:00
PRIOn knowledge base
www.prio-n.com
4
Cross-site scripting (XSS) vulnerability in the Block Class module 7.x-2.x before 7.x-2.2 for Drupal allows remote authenticated users with the “Administer block classes” permission to inject arbitrary web script or HTML via a class name.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fedora | eq | 24 | |
| block_class | eq | 7.120.20 | |
| block_class | eq | 7.120.21 |
Related
openvas
openvas
Fedora Update for drupal7-block_class FEDORA-2016-687
2016-04-18 00:00:00
Fedora Update for drupal7-block_class FEDORA-2016-0
2016-04-22 00:00:00
Fedora Update for drupal7-block_class FEDORA-2016-8
2016-04-22 00:00:00
cvelist
cvelist
CVE-2016-3144
2016-04-15 15:00:00
nessus
nessus
Fedora 23 : drupal7-block_class-2.3-1.fc23 (2016-0d82b3eb5d)
2016-04-22 00:00:00
Fedora 22 : drupal7-block_class-2.3-1.fc22 (2016-8d983eeb13)
2016-04-22 00:00:00
Fedora 24 : drupal7-block_class-2.3-1.fc24 (2016-687b3a3d5d)
2016-04-22 00:00:00
nvd
nvd
CVE-2016-3144
2016-04-15 15:59:02
drupal
drupal
Block Class - Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-175
2015-12-16 00:00:00
cve
cve
CVE-2016-3144
2016-04-15 15:59:02
fedora
fedora
[SECURITY] Fedora 24 Update: drupal7-block_class-2.3-1.fc24
2016-04-17 23:46:41
[SECURITY] Fedora 23 Update: drupal7-block_class-2.3-1.fc23
2016-04-22 01:27:52
[SECURITY] Fedora 22 Update: drupal7-block_class-2.3-1.fc22
2016-04-22 01:52:33