2 matches found
CVE-2015-3385
Cross-site scripting XSS vulnerability in the Taxonomy Path module before 7.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the "Link to path" field formatter...
5.3AI score0.00946EPSS
SaveExploits0References4
CVE-2015-3385: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Taxonomy Path module before 7.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the "Link to path" field formatter...
3.5CVSS5.9AI score0.00946EPSS
SaveExploits0References2
20