Cross-site scripting (XSS) vulnerability in the Taxonomy Find module 6.x-2.x through 6.x-1.2 and 7.x-2.x through 7.x-1.0 in Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via taxonomy vocabulary and term names.
References
Link | Resource |
---|---|
https://www.drupal.org/node/2577903 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2017-11-06 17:29
Updated : 2024-02-28 16:04
NVD link : CVE-2015-7878
Mitre link : CVE-2015-7878
CVE.ORG link : CVE-2015-7878
JSON object : View
Products Affected
taxonomy_find_project
- taxonomy_find
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')