5 matches found
CVE-2015-3347
Cross-site request forgery CSRF vulnerability in the Cloudwords for Multilingual Drupal module before 7.x-2.3 for Drupal allows remote attackers to hijack the authentication of unspecified victims via an unknown menu callback...
PT-2015-6169
Name of the Vulnerable Software and Affected Versions Cloudwords for Multilingual Drupal module versions prior to 7.x-2.3 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote authenticated users to inject arbitrary web script or HTML. This is achieved...
CVE-2015-3348: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Cloudwords for Multilingual Drupal module before 7.x-2.3 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a node title...
CVE-2015-3347: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Cloudwords for Multilingual Drupal module before 7.x-2.3 for Drupal allows remote attackers to hijack the authentication of unspecified victims via an unknown menu callback...
PT-2015-6168
Name of the Vulnerable Software and Affected Versions Cloudwords for Multilingual Drupal module versions prior to 7.x-2.3 Description The issue is related to a cross-site request forgery CSRF vulnerability, which allows remote attackers to hijack the authentication of victims via an unknown menu...