CVE-2015-4370: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Site Documentation module before 6.x-1.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to taxonomy terms...

PT-2015-6540

Name of the Vulnerable Software and Affected Versions Ubercart Discount Coupons module versions 6.x-1.x before 6.x-1.8 Description The issue is related to a cross-site scripting XSS vulnerability in administration pages of the Ubercart Discount Coupons module for Drupal. This vulnerability allows...

CVE-2015-4386: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in unspecified administration pages in the EntityBulkDelete module 7.x-1.0 for Drupal allow remote attackers to inject arbitrary web script or HTML via unknown vectors involving creating or editing 1 comments, 2 taxonomy terms, or 3 nodes...

CVE-2015-4365: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Taxonomy Accordion module for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to taxonomy terms...

CVE-2015-3387

Multiple cross-site scripting XSS vulnerabilities in the Taxonomy Tools module before 7.x-1.4 for Drupal allow remote authenticated users to inject arbitrary web script or HTML via a 1 node or 2 taxonomy term title...

CVE-2015-3385

Cross-site scripting XSS vulnerability in the Taxonomy Path module before 7.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the "Link to path" field formatter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Taxonomy Tools module before 7.x-1.4 for Drupal allow remote authenticated users to inject arbitrary web script or HTML via a 1 node or 2 taxonomy term title...

Cross site scripting

Cross-site scripting XSS vulnerability in the Taxonomy Path module before 7.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the "Link to path" field formatter...

CVE-2015-3385

Cross-site scripting XSS vulnerability in the Taxonomy Path module before 7.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the "Link to path" field formatter...

CVE-2015-3387

Multiple cross-site scripting XSS vulnerabilities in the Taxonomy Tools module before 7.x-1.4 for Drupal allow remote authenticated users to inject arbitrary web script or HTML via a 1 node or 2 taxonomy term title...

CVE-2015-3387

The CVE-2015-3387 entry applies to Drupal’s contributed Taxonomy Tools module prior to 7.x-1.4. The vulnerability is an XSS flaw allowing remote authenticated users to inject arbitrary script or HTML via (1) node titles or (2) taxonomy term titles. Affected versions are Taxonomy Tools 7.x-1.x bef...

CVE-2015-3385

CVE-2015-3385 affects Drupal’s Taxonomy Path module for 7.x versions prior to 7.x-1.2. The vulnerability is a reflected XSS due to insufficient sanitization in the “Link to path” field formatter, allowing remote authenticated users to inject arbitrary script/html. The public advisories corroborat...

CVE-2015-3369

Cross-site scripting XSS vulnerability in the Taxonews module before 6.x-1.2 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via a term name in a block...

CVE-2015-3368

Cross-site scripting XSS vulnerability in the administration user interface in the Classified Ads module before 6.x-3.1 and 7.x-3.x before 7.x-3.1 for Drupal allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via a category name...

Cross site scripting

Cross-site scripting XSS vulnerability in the administration user interface in the Classified Ads module before 6.x-3.1 and 7.x-3.x before 7.x-3.1 for Drupal allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via a category name...

CVE-2015-3368

Cross-site scripting XSS vulnerability in the administration user interface in the Classified Ads module before 6.x-3.1 and 7.x-3.x before 7.x-3.1 for Drupal allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via a category name...

CVE-2015-3369

Cross-site scripting XSS vulnerability in the Taxonews module before 6.x-1.2 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via a term name in a block...

PT-2015-6207

Name of the Vulnerable Software and Affected Versions Drupal Taxonomy Tools module versions prior to 7.x-1.4 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via a node or taxonomy term title, potentially leading to cross-site scripting XSS attacks...

PT-2015-6190

Name of the Vulnerable Software and Affected Versions Drupal Taxonews module versions prior to 6.x-1.2 Drupal Taxonews module versions 7.x-1.x prior to 7.x-1.1 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with the "administer taxonomy" permission to...

CVE-2015-3369: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Taxonews module before 6.x-1.2 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via a term name in a block...