EUVD-2014-7924

Malware in sbrugna...

CVE-2014-8075

The CVE-2014-8075 entry covers a Cross-site scripting (XSS) vulnerability in the Drupal Tribune module (versions 6.x-1.x and 7.x-3.x). The root cause is insufficient filtering of user-provided text from Tribune node titles, allowing remote authenticated users with certain permissions to inject ar...

SA-CONTRIB-2014-008 - Tribune - Cross Site Scripting (XSS)

A tribune is a type of chatroom. The module doesn't sufficiently filter user provided text from Tribune node titles. This vulnerability is mitigated by the fact that an attacker must have a role with the permission to create a Tribune node. CVE identifiers issued CVE-2014-8075 Versions affected...