2 matches found
CVE-2014-9153
Cross-site scripting XSS vulnerability in the Services module 7.x-3.x before 7.x-3.10 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the callback parameter in a JSONP response...
4.3CVSS5.3AI score0.00931EPSS
SaveExploits0References2
CVE-2014-9153
Cross-site scripting XSS vulnerability in the Services module 7.x-3.x before 7.x-3.10 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the callback parameter in a JSONP response...
5.3AI score0.00931EPSS
SaveExploits0References2
20