PT-2015-6566

Name of the Vulnerable Software and Affected Versions Ubercart Webform Checkout Pane module versions 6.x-3.x before 6.x-3.10 Ubercart Webform Checkout Pane module versions 7.x-3.x before 7.x-3.11 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote...

CVE-2015-4384: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Ubercart Webform Checkout Pane module 6.x-3.x before 6.x-3.10 and 7.x-3.x before 7.x-3.11 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors...