CVE-2015-8233: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the MAYO theme 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.6 for Drupal allows remote administrators with the "Administer themes" permission to inject arbitrary web script or HTML via unspecified vectors related to theme settings...

PT-2015-7753

Name of the Vulnerable Software and Affected Versions MAYO theme versions 7.x-1.x before 7.x-1.4 MAYO theme versions 7.x-2.x before 7.x-2.6 Description A cross-site scripting XSS issue exists, allowing remote administrators with the "Administer themes" permission to inject arbitrary web script or...

CVE-2014-8746

Cross-site scripting XSS vulnerability in the Skeleton theme 7.x-1.2 through 7.x-1.3 before 7.x-1.4, for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via vectors related to theme settings...

PT-2014-8705

Name of the Vulnerable Software and Affected Versions Drupal Skeleton theme versions 7.x-1.2 through 7.x-1.3 Description A cross-site scripting XSS issue allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via vectors related to theme...

CVE-2014-8746: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Skeleton theme 7.x-1.2 through 7.x-1.3 before 7.x-1.4, for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via vectors related to theme settings...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in template.php in Zen theme 7.x-3.x before 7.x-3.3 and 7.x-5.x before 7.x-5.5 for Drupal allow remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via the skiplinktext setting and unspecified...

Cross site scripting

Cross-site scripting XSS vulnerability in the SimpleCorp theme 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via vectors related to theme settings...

CVE-2014-7979

Cross-site scripting XSS vulnerability in the SimpleCorp theme 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via vectors related to theme settings...

CVE-2014-7979

Cross-site scripting XSS vulnerability in the SimpleCorp theme 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via vectors related to theme settings...

CVE-2014-7978

Cross-site scripting XSS vulnerability in the BlueMasters theme 7.x-2.x before 7.x-2.1 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via vectors related to theme settings...

CVE-2014-7978

Cross-site scripting XSS vulnerability in the BlueMasters theme 7.x-2.x before 7.x-2.1 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via vectors related to theme settings...

PT-2014-8350

Name of the Vulnerable Software and Affected Versions Drupal BlueMasters theme versions 7.x-2.x before 7.x-2.1 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via vectors relate...

PT-2014-8351

Name of the Vulnerable Software and Affected Versions SimpleCorp theme versions 7.x-1.x before 7.x-1.1 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via vectors related to the...

CVE-2014-7979: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the SimpleCorp theme 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via vectors related to theme settings...

CVE-2014-7978: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the BlueMasters theme 7.x-2.x before 7.x-2.1 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via vectors related to theme settings...

SA-CONTRIB-2014-047 - Zen - Cross Site Scripting

The Zen theme is a powerful, yet simple, HTML5 starting theme with a responsive, mobile-first grid design. The theme does not properly sanitize theme settings before they are used in the output of a page. Themes that have copied code from Zen's template.php may suffer from this same issue. If you...

Remote file inclusion

PHP remote file inclusion vulnerability in theme/settings.php in bluevirus-design SMA-DB 0.3.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pfadz parameter...