Multiple cross-site scripting (XSS) vulnerabilities in the Quick Edit module 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via an (1) entity title, related to in-place editing, or a (2) node title.
References
Link | Resource |
---|---|
https://www.drupal.org/node/2546164 | Patch Vendor Advisory |
https://www.drupal.org/node/2546066 | Patch |
Configurations
Configuration 1 (hide)
|
Information
Published : 2015-08-31 12:59
Updated : 2015-09-01 11:33
NVD link : CVE-2015-6753
Mitre link : CVE-2015-6753
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
quick_edit_project
- quick_edit