PT-2015-6555

Name of the Vulnerable Software and Affected Versions Drupal OG tabs module version prior to 7.x-1.1 Description The issue allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to nodes posted in an Organic Groups group, which is a...

CVE-2013-0317

Cross-site scripting XSS vulnerability in the Manager Change for Organic Groups ogmanagerchange module 7.x-2.x before 7.x-2.1 for Drupal might allow remote attackers to inject arbitrary web script or HTML via the username in the new manager autocomplete field...

PT-2013-2229

Name of the Vulnerable Software and Affected Versions Drupal og manager change module versions 7.x-2.x before 7.x-2.1 Description A cross-site scripting XSS issue exists, potentially allowing remote attackers to inject arbitrary web script or HTML via the username in the new manager autocomplete...