CVE-2015-7980

CVE-2015-7980 affects the Compass Rose module for Drupal (6.x-1.x)—pre-6.x-1.1. The vulnerability is a cross-site scripting (XSS) flaw introduced by embedding a JavaScript library from an external source that was not reliable, enabling remote attackers to inject arbitrary script/HTML via unspecif...