PT-2015-4247

Name of the Vulnerable Software and Affected Versions Godwin's Law module versions prior to 7.x-1.1 for Drupal Description The issue allows remote authenticated users to inject arbitrary web script or HTML via a Watchdog message when the dblog module is used. This is due to a cross-site scripting...

SA-CONTRIB-2014-122 - MoIP - Cross Site Scripting (XSS)

This module enables you to use Moip a Brazilian payment method with Drupal Commerce. The module doesn't sufficiently filter the data passed by the automatic notifications, leaving the possibility for a malicious user to insert Cross Site Scripting xss attacks. This vulnerability is mitigated by t...