CVE-2015-1621

The CVE-2015-1621 is a Drupal Webform prepopulate block vulnerability. Affected component: Webform prepopulate block module for Drupal 7.x (before 7.x-3.1). Issue: cross-site scripting (XSS) where user-supplied text is not sufficiently sanitized when displaying the block, allowing remote authenti...

SA-CONTRIB-2011-023 - Prepopulate - Multiple vulnerabilities

The Prepopulate module enables pre-populating forms in Drupal using the $REQUEST vairable. The module does not adequately validate user input leading to an cross-site scripting XSS possibility in certain circumstances. Users privileged to use forms with certain form fields can insert arbitrary HT...

SA-CONTRIB-2010-086 - Prepopulate - Access Bypass

The Prepopulate module provides the ability for form fields to be pre-populated via the request sent for the form. The module is vulnerable to access bypass which would allow a malicious user to change the value of fields they would not otherwise have access to alter. Versions affected Prepopulat...