PT-2015-6560

Name of the Vulnerable Software and Affected Versions Drupal Crumbs module versions 7.x-2.x before 7.x-2.3 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with the "Administer Crumbs" permission to inject arbitrary web script or HTML via a custom breadcrum...

Drupal Crumbs Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site scripting vulnerability exists in Drupal Crumbs, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive information ...