CVE-2015-3381 - Cross-site scripting (XSS) vulnerability in the Node basket module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors

Back Back to CVE browser

LOW

Cross-site scripting (XSS) vulnerability in the Node basket module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors

Published Apr 21, 2015

3.5

LOW

CVSS 2.0

EPSS 0.94%

Description

Cross-site scripting (XSS) vulnerability in the Node basket module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

http://www.openwall.com/lists/oss-security/2015/02/13/12
mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/72616
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-3426
Advisory
https://www.drupal.org/node/2424419
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2015/02/13/12		mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/72616		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-3426		Advisory
https://www.drupal.org/node/2424419		x_refsource_MISCPatchVendor Advisory