PT-2015-7335

Name of the Vulnerable Software and Affected Versions Drupal Time Tracker module versions 7.x-1.x before 7.x-1.4 Description The issue allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a note added to a time entry or an activity used to categori...

Multiple Cross-Site Scripting Vulnerabilities in Drupal Time Tracker Module

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Time Tracker is one of the time tracking system modules. The Drupal Time Tracker module has multiple cross-site scripting vulnerabilities that can be exploited by attackers to cause the...

Drupal Time Tracker Module Cross-Site Scripting Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Time Tracker is one of the time tracking system modules. A cross-site scripting vulnerability exists in the Drupal Time Tracker module, which stems from the program's failure to...