exploitDog

CVE-2015-2086

Опубликовано: 26 фев. 2015

Источник: nvd

CVSS2: 3.5

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the live preview in the Panopoly Magic module before 7.x-1.17 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a pane title.

Ссылки

http://www.securityfocus.com/bid/72671
https://www.drupal.org/node/2428749
Patch
Vendor Advisory
https://www.drupal.org/node/2428799
Patch
Vendor Advisory
http://www.securityfocus.com/bid/72671
https://www.drupal.org/node/2428749
Patch
Vendor Advisory
https://www.drupal.org/node/2428799
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:panopoly_magic_project:panopoly_magic:*:*:*:*:*:drupal:*:*

Версия до 7.x-1.16 (включая)

EPSS

Процентиль: 57%

0.00936

Низкий

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-2hp3-89rw-p99p

github

около 4 лет назад

Cross-site scripting (XSS) vulnerability in the live preview in the Panopoly Magic module before 7.x-1.17 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a pane title.

EPSS

Процентиль: 57%

0.00936

Низкий

3.5 Low

CVSS2

Дефекты

CWE-79