Lucene search
+L

9 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2014-4432

Malware in sbrugna...

4.3CVSS6.4AI score0.01161EPSS
SaveExploits0References5
Drupal
Drupal
•added 2020/07/22 12:00 a.m.•21 views

Easy Breadcrumb - Moderately critical - Cross site scripting - SA-CONTRIB-2020-027

This module enables you to use the current URL path alias and the current page's title to automatically extract the breadcrumb's segments and its respective links then show them as breadcrumbs on your website. The module doesn't sufficiently sanitize editor input in certain circumstances leading ...

6AI score
SaveExploits0References6
Drupal
Drupal
•added 2019/06/19 12:00 a.m.•26 views

Easy Breadcrumb - Critical - Cross Site Scripting - SA-CONTRIB-2019-053

This module enables you to use the current URL path alias and the current page's title to automatically extract the breadcrumb's segments and its respective links then show them as breadcrumbs on your website. The module doesn't sufficiently sanitise user input in certain circumstances. This...

5.9AI score
SaveExploits0References8
NVD
NVD
•added 2014/06/20 2:55 p.m.•24 views

CVE-2014-4505

Cross-site scripting XSS vulnerability in the Easy Breadcrumb module 7.x-2.x before 7.x-2.10 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.7AI score0.01161EPSS
SaveExploits0References4
Prion
Prion
•added 2014/06/20 2:55 p.m.•23 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Easy Breadcrumb module 7.x-2.x before 7.x-2.10 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6.1AI score0.01161EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2014/06/20 2:00 p.m.•49 views

CVE-2014-4505

The CVE-2014-4505 entry applies to the Drupal contributed module Easy Breadcrumb (7.x-2.x) prior to 7.x-2.10. Root cause: the module does not properly sanitize user-supplied values, enabling cross-site scripting (XSS). Impact: remote attackers could inject arbitrary script/HTML via unspecified ve...

4.3CVSS5.9AI score0.01161EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2014/06/20 2:00 p.m.•34 views

CVE-2014-4505

Cross-site scripting XSS vulnerability in the Easy Breadcrumb module 7.x-2.x before 7.x-2.10 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

5.7AI score0.01161EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/06/20 12:00 a.m.•3 views

CVE-2014-4505: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Easy Breadcrumb module 7.x-2.x before 7.x-2.10 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6AI score0.01161EPSS
SaveExploits0References2
Drupal
Drupal
•added 2014/06/18 12:00 a.m.•24 views

SA-CONTRIB-2014-063 - Easy Breadcrumb - Cross Site Scripting (XSS)

The Easy Breadcrumb module generates breadcrumbs from path aliases. This module does not properly sanitize user-supplied values creating a Cross Site Scripting XSS vulnerability. CVE identifiers issued CVE-2014-4505 Versions affected Easy breadcrumbs 7.x-2.x versions prior to 7.x-2.10. Drupal cor...

4.3CVSS5.7AI score0.01161EPSS
SaveExploits0References12
Rows per page
Query Builder