PT-2019-6940

Name of the Vulnerable Software and Affected Versions Drupal Zen theme versions 6.x-1.x, 7.x-3.x before 7.x-3.2, 7.x-5.x before 7.x-5.4 Description A cross-site scripting XSS issue exists in the zen breadcrumb function, allowing remote authenticated users with the "administer themes" permission t...

PT-2012-4201

Name of the Vulnerable Software and Affected Versions Drupal Zen module versions 6.x-1.x before 6.x-1.1 Description A cross-site scripting issue exists when the "Append the content title to the end of the breadcrumb" option is enabled, allowing remote attackers to inject arbitrary web script or...