EUVD-2015-3405

Malware in sbrugna...

CVE-2015-3360

Cross-site scripting XSS vulnerability in the Term Merge module before 7.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Term Merge module before 7.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-3360

CVE-2015-3360 describes a Cross-Site Scripting (XSS) vulnerability in the Drupal contributed Term Merge module for 7.x-1.x prior to 7.x-1.2. The issue arises because user input is not sufficiently filtered under certain conditions, allowing remote authenticated users to inject arbitrary web scrip...

CVE-2015-3360: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Term Merge module before 7.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Drupal Term Merge Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP. A cross-site scripting vulnerability exists in the Drupal Term Merge module because it fails to properly filter user-supplied input. An attacker may be able to exploit this vulnerability to execute arbitrary script code ...