EUVD-2015-4411

Malware in sbrugna...

CVE-2015-4388

CVE-2015-4388 affects Drupal’s contributed Current Search Links module (7.x-1.x) before 7.x-1.1. The vulnerability arises when the option "Append the keywords passed by the user to the list" is disabled, leaving the module unable to adequately sanitize the user’s search query. This allows remote ...

PT-2015-6570

Name of the Vulnerable Software and Affected Versions Drupal Current Search Links module versions 7.x-1.x before 7.x-1.1 Description A cross-site scripting XSS issue exists in the Current Search Links module for Drupal. This occurs when the "Append the keywords passed by the user to the list"...

CVE-2015-4388: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Current Search Links module 7.x-1.x before 7.x-1.1 for Drupal, when the "Append the keywords passed by the user to the list" option is disabled, allows remote attackers to inject arbitrary web script or HTML via a crafted search query...