EUVD-2015-2198

Malware in sbrugna...

CVE-2015-2088

Cross-site scripting XSS vulnerability in unspecified administration pages in the Term Queue module before 6.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in unspecified administration pages in the Term Queue module before 6.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2015-2088

CVE-2015-2088 describes a cross-site scripting (XSS) vulnerability in the contributed Drupal module Term Queue (not Drupal core), affecting version 6.x-1.0 and related 6.x releases. The root cause is insufficient sanitization of user-supplied text in some administration pages, enabling remote att...

Drupal Term Queue Module Cross-Site Scripting Vulnerability

Drupal is an open source content management platform. A cross-site scripting vulnerability exists in the Drupal Term Queue module, which allows remote attackers to exploit this vulnerability to construct malicious URIs and trick users into parsing them, which can be used to obtain sensitive...