GHSA-G7Q5-PJJR-GQVP Regular Expression Denial of Service in tough-cookie

Affected versions of tough-cookie are susceptible to a regular expression denial of service. The amplification on this vulnerability is relatively low - it takes around 2 seconds for the engine to execute on a malicious input which is 50,000 characters in length. If node was compiled using the...

Drupal Webform module cross-site scripting vulnerability (CNVD-2015-03861)

Drupal is a free and open source content management system developed in PHP. webform is a market research questionnaire module. A cross-site scripting vulnerability exists in the Drupal Webform module processing node header, which allows remote attackers to exploit the vulnerability to inject...

Drupal Quizzler Module Cross-Site Scripting Vulnerability

The Drupal Quizzler module is a Drupal module for creating online tests. A cross-site scripting vulnerability exists in Drupal Quizzler module versions prior to 7-x.1.16. This allows an authenticated, remote attacker to inject arbitrary web script or HTML via a node header...