6 matches found
CVE-2015-2086
Cross-site scripting XSS vulnerability in the live preview in the Panopoly Magic module before 7.x-1.17 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a pane title...
Cross site scripting
Cross-site scripting XSS vulnerability in the live preview in the Panopoly Magic module before 7.x-1.17 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a pane title...
CVE-2015-2086
Cross-site scripting XSS vulnerability in the live preview in the Panopoly Magic module before 7.x-1.17 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a pane title...
CVE-2015-2086
Cross-site scripting XSS vulnerability in the live preview in the Panopoly Magic module before 7.x-1.17 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a pane title...
PT-2015-5593
Name of the Vulnerable Software and Affected Versions Panopoly Magic module versions prior to 7.x-1.17 Description The issue is related to a cross-site scripting XSS vulnerability in the live preview of the Panopoly Magic module for Drupal. This vulnerability allows remote authenticated users to...
CVE-2015-2086: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the live preview in the Panopoly Magic module before 7.x-1.17 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a pane title...