LOW
Cross-site scripting (XSS) vulnerability in unspecified administration pages in the OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Ontology module is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
Published Sep 17, 2015
2.6
LOWCVSS 2.0
EPSS 0.91%
Description
Affected products
Remediation
Metrics
References (2)
Change history (0)
No recorded changes yet.