Cross site scripting

Cross-site scripting XSS vulnerability in the Node basket module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

PT-2015-6202

Name of the Vulnerable Software and Affected Versions Drupal Node basket module affected versions not specified Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of arbitrary users for...