Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Profile2 Privacy Project Subscribe
Filtered by product Profile2 Privacy
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-4376 1 Profile2 Privacy Project 1 Profile2 Privacy 2015-08-13 3.5 LOW N/A
Cross-site scripting (XSS) vulnerability in the Profile2 Privacy module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with the "Administer Profile2 Privacy Levels" permission to inject arbitrary web script or HTML via unspecified vectors.