Lucene search
+L

9 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2016-4196

Malware in sbrugna...

5.4CVSS5.3AI score0.01116EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2012-1667

Malware in sbrugna...

2.1CVSS6.4AI score0.01607EPSS
SaveExploits0References9
OSV
OSV
•added 2025/04/23 4:59 p.m.•21 views

DRUPAL-CONTRIB-2025-043

Block Class enables you to add custom attributes to blocks. The module did not sufficiently sanitize custom attribute input, allowing for potential XSS attacks when malicious JavaScript was injected as a custom attribute. This vulnerability is mitigated by the fact that an attacker must have a ro...

6.1CVSS6.2AI score0.00242EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/04/23 12:00 a.m.•17 views

Drupal Block Class module 4.0.0 - Unauthenticated Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS vulnerability discovered by Ivo Van Geertruyen mr.baileys in WordPress Module Block Class versions 4.0.0...

6.1CVSS6.1AI score0.00242EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
•added 2016/04/19 12:00 a.m.•47 views

Drupal Block Class module cross-site scripting vulnerability (CNVD-2016-02374)

Drupal is the Drupal community maintained by a set of free, open source content management system developed in PHP. Block Class is one of the administrator through the Block configuration interface to add CSS to any Block module . Drupal Block Class module 7.x-2.2 before the 7.x-2.x version of a...

5.4CVSS6.2AI score0.01116EPSS
SaveExploits0References1
NVD
NVD
•added 2012/09/18 8:55 p.m.•28 views

CVE-2012-1657

Cross-site scripting XSS vulnerability in blockclass.module in the Block Class module before 7.x-1.1 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the class name...

2.1CVSS5.4AI score0.01607EPSS
SaveExploits0References8
Prion
Prion
•added 2012/09/18 8:55 p.m.•25 views

Cross site scripting

Cross-site scripting XSS vulnerability in blockclass.module in the Block Class module before 7.x-1.1 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the class name...

2.1CVSS5.7AI score0.01607EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
•added 2012/09/18 8:00 p.m.•37 views

CVE-2012-1657

Cross-site scripting XSS vulnerability in blockclass.module in the Block Class module before 7.x-1.1 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the class name...

5.4AI score0.01607EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/09/18 12:00 a.m.•5 views

CVE-2012-1657: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in blockclass.module in the Block Class module before 7.x-1.1 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the class name...

2.1CVSS6AI score0.01607EPSS
SaveExploits0References2
Rows per page
Query Builder