Vulners
Lucene search
2 matches found
CVE-2014-9153
Cross-site scripting XSS vulnerability in the Services module 7.x-3.x before 7.x-3.10 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the callback parameter in a JSONP response...
4.3CVSS5.5AI score0.00248EPSS
Exploits0References1
Cross site scripting
Cross-site scripting XSS vulnerability in the Services module 7.x-3.x before 7.x-3.10 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the callback parameter in a JSONP response...
4.3CVSS5.7AI score0.00248EPSS
Exploits0References2Affected Software1
20