Drupal Petition module cross-site scripting vulnerability (CNVD-2015-03892)

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Petitions is one of the petition modules used in the U.S. White House website. A cross-site scripting vulnerability exists in the administration page of the Drupal Petitions module. A...

PT-2015-6559

Name of the Vulnerable Software and Affected Versions Drupal Petition module versions 6.x-1.x before 6.x-1.3 Description A cross-site scripting XSS issue exists in the administration pages of the Petition module, allowing remote authenticated users with the "create petition" permission to inject...

CVE-2015-4377: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in unspecified administration pages in the Petition module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users with the "create petition" permission to inject arbitrary web script or HTML via unknown vectors...