CVE-2015-2101

Cross-site scripting XSS vulnerability in the Navigate bar in the Navigate module before 6.x-1.1 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Drupal Navigate module cross-site scripting vulnerability (CNVD-2015-05492)

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Navigate is one of the customizable navigation modules that supports rapid deployment. A cross-site scripting vulnerability exists in the Drupal Navigate module. A remote attacker can...

Drupal Navigate module cross-site scripting vulnerability

Drupal is a free, open-source content management system developed in the PHP language.Navigate is one of the customizable navigation modules that supports rapid deployment. A cross-site scripting vulnerability exists in the Drupal Navigate module, which allows remote attackers to exploit the...

Drupal Navigate module cross-site scripting vulnerability

Drupal is an open source content management platform. A cross-site scripting vulnerability exists in the Drupal Navigate module, which allows remote attackers to exploit this vulnerability to construct malicious URIs that can be tricked into being parsed by the user, which can be used to obtain...