PT-2014-8626

Name of the Vulnerable Software and Affected Versions Croogo versions prior to 2.1.0 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via several parameters, including dataContacttitle to the "admin/contacts/contacts/add" page,...

CVE-2014-8577: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Croogo before 2.1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 dataContacttitle parameter to admin/contacts/contacts/add page; 2 dataBlocktitle or 3 dataBlockalias parameter to admin/blocks/blocks/edit page; 4...

CVE-2012-0914

Cross-site scripting XSS vulnerability in displayrenderers/panelsrenderereditor.class.php in the admin view in the Panels module 6.x-2.x before 6.x-3.10 and 7.x-3.x before 7.x-3.0 for Drupal allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the...

PT-2012-2946

Name of the Vulnerable Software and Affected Versions Panels module versions 6.x-2.x through 6.x-3.9 Panels module versions 7.x-3.x through 7.x-2.x Description A cross-site scripting XSS issue exists in the Panels module, specifically in the display renderers/panels renderer editor.class.php file...

CVE-2012-0914: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in displayrenderers/panelsrenderereditor.class.php in the admin view in the Panels module 6.x-2.x before 6.x-3.10 and 7.x-3.x before 7.x-3.0 for Drupal allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the...