2 matches found
CVE-2013-0317: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Manager Change for Organic Groups ogmanagerchange module 7.x-2.x before 7.x-2.1 for Drupal might allow remote attackers to inject arbitrary web script or HTML via the username in the new manager autocomplete field...
4.3CVSS6AI score0.01161EPSS
SaveExploits0References2
PT-2013-2229
Name of the Vulnerable Software and Affected Versions Drupal og manager change module versions 7.x-2.x before 7.x-2.1 Description A cross-site scripting XSS issue exists, potentially allowing remote attackers to inject arbitrary web script or HTML via the username in the new manager autocomplete...
4.3CVSS0.01161EPSS
SaveExploits0References5
20