CVE-2015-1567

Affected software: Drupal GD Infinite Scroll module (before 7.x-1.4). Vulnerability: Cross-site scripting (XSS) on the admin page due to insufficient input sanitization, exploitable by remote authenticated users holding the 'edit gd infinite scroll settings' permission. Vectors are not specified ...