PT-2016-4862

Name of the Vulnerable Software and Affected Versions Drupal Field Group module version 7.x-1.x before 7.x-1.5 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with permission to configure field display settings to inject arbitrary web script or HTML via an...

Cross site scripting

Cross-site scripting XSS vulnerability in the Display Suite module 7.x-2.7 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to field display settings...

CVE-2015-4392

CVE-2015-4392 describes an XSS vulnerability in the Drupal Display Suite module for version 7.x-2.7. The issue allows remote authenticated users to inject arbitrary script/HTML via field display settings. The root cause is improper sanitization in Display Suite 7.x-2.7. Mitigation: upgrade to Dis...

PT-2015-6574

Name of the Vulnerable Software and Affected Versions Display Suite module versions 7.x-2.7 Description A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to field display settings. Recommendations Fo...

CVE-2015-4392: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Display Suite module 7.x-2.7 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to field display settings...