CVE-2013-4274

Cross-site scripting XSS vulnerability in the passwordpolicyadminview function in passwordpolicy.admin.inc in the Password Policy module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with the "Administer policies" permission to inject arbitrary web...

PT-2015-6569

Name of the Vulnerable Software and Affected Versions Drupal Password Policy module versions 6.x-1.x before 6.x-1.11 Drupal Password Policy module versions 7.x-1.x before 7.x-1.11 Description A cross-site scripting XSS issue exists in the administration pages of the Password Policy module for...

PT-2012-3398

Name of the Vulnerable Software and Affected Versions Drupal Password Policy module versions prior to 6.x-1.4 Drupal Password Policy module versions prior to 7.x-1.0 beta3 Description A cross-site request forgery CSRF issue exists in the Password Policy module, allowing remote attackers to hijack...