CVE-2015-1568

The CVE-2015-1568 entry concerns the Drupal GD Infinite Scroll contributed module, affected versions prior to 7.x-1.4. It describes a Cross-Site Request Forgery (CSRF) vulnerability that allows remote attackers to hijack the authentication of users who have the permission to edit GD Infinite Scro...

CVE-2015-1567

Affected software: Drupal GD Infinite Scroll module (before 7.x-1.4). Vulnerability: Cross-site scripting (XSS) on the admin page due to insufficient input sanitization, exploitable by remote authenticated users holding the 'edit gd infinite scroll settings' permission. Vectors are not specified ...