Lucene search
K

10 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2015-5444

Malware in sbrugna...

3.5CVSS6.4AI score0.00954EPSS
Exploits0References4
OSV
OSV
added 2019/12/11 6:20 p.m.1 views

DRUPAL-CONTRIB-2019-092

The Smart Trim module allows site builders additional control with text summary fields. The module doesn't sufficiently filter text when certain options are selected. This vulnerability is mitigated by the fact that an attacker must have a role with the ability to create content on the site when...

6.6AI score
Exploits0References1
Drupal
Drupal
added 2019/12/11 12:0 a.m.9 views

Smart Trim - Moderately critical - Cross site scripting - SA-CONTRIB-2019-092

The Smart Trim module allows site builders additional control with text summary fields. The module doesn't sufficiently filter text when certain options are selected. This vulnerability is mitigated by the fact that an attacker must have a role with the ability to create content on the site when...

6.5AI score
Exploits0References7
CNVD
CNVD
added 2015/08/21 12:0 a.m.1 views

Drupal Smart Trim module cross-site scripting vulnerability (CNVD-2015-05695)

Drupal is a free, open-source content management system developed in PHP and maintained by the Drupal community.Smart Trim is one of the text field formatting modules. A cross-site scripting vulnerability exists in the Drupal Smart Trim module in versions 7.x-1.5 prior to 7.x-1.x. A remote attack...

3.5CVSS6AI score0.00954EPSS
Exploits0References1
NVD
NVD
added 2015/08/18 5:59 p.m.9 views

CVE-2015-5489

Cross-site scripting XSS vulnerability in the Smart Trim module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors involving the field settings form...

3.5CVSS5.3AI score0.00954EPSS
Exploits0References3
Prion
Prion
added 2015/08/18 5:59 p.m.9 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Smart Trim module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors involving the field settings form...

3.5CVSS5.7AI score0.00954EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2015/08/18 5:0 p.m.46 views

CVE-2015-5489

The Drupal Smart Trim module (7.x-1.x) is affected by an XSS vulnerability in versions prior to 7.x-1.5 due to insufficient input filtering in the field settings form. This allows remote authenticated users with certain permissions to inject arbitrary script/HTML. Impact is partial integrity loss...

3.5CVSS5.4AI score0.00954EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2015/08/18 5:0 p.m.15 views

CVE-2015-5489

Cross-site scripting XSS vulnerability in the Smart Trim module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors involving the field settings form...

5.3AI score0.00954EPSS
Exploits0References3
CNVD
CNVD
added 2015/05/04 12:0 a.m.2 views

Drupal Smart Trim Module Cross-Site Scripting Vulnerability

Drupal is a free and open source content management system developed in PHP. Smart Trim Module for Drupal is a module application for Drupal. The Drupal Smart Trim Module for Drupal handles cross-site scripting vulnerabilities in field setup forms, allowing remote attackers to exploit the...

6.1AI score
Exploits0References1
Drupal
Drupal
added 2015/04/29 12:0 a.m.19 views

Smart Trim - Less Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-102

This module implements a new field formatter for textfields text, textlong, and textwithsummary, if you want to get technical that improves upon the "Summary or Trimmed" formatter built into Drupal 7. The module doesn't sufficiently filter user input via the field settings form. This vulnerabilit...

3.5CVSS6.5AI score0.00954EPSS
Exploits0References12
Rows per page
Query Builder