7 matches found
EUVD-2014-9318
Malware in sbrugna...
CVE-2014-9501
Cross-site scripting XSS vulnerability in the Poll Chart Block module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a poll node title...
Cross site scripting
Cross-site scripting XSS vulnerability in the Poll Chart Block module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a poll node title...
CVE-2014-9501
The CVE concerns the Drupal Poll Chart Block module (Drupal 7.x, versions prior to 7.x-1.2). The issue is an XSS vulnerability caused by insufficient sanitization of poll node titles displayed in the poll chart block, allowing remote authenticated users to inject arbitrary script/HTML. Affected p...
CVE-2014-9501
Cross-site scripting XSS vulnerability in the Poll Chart Block module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a poll node title...
PT-2015-4249
Name of the Vulnerable Software and Affected Versions Poll Chart Block module versions 7.x-1.x before 7.x-1.2 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via a poll node title, which can lead to cross-site scripting XSS attacks. Recommendations F...
CVE-2014-9501: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Poll Chart Block module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a poll node title...