TI-2015-06632 CVE-2015-7980 · GHSA-w4m4-mv24-mwj8Cross-site scripting (XSS) vulnerability in the Compass Rose module 6.x-1.x before…Priority LOW 30Cross-site scripting (XSS) vulnerability in the Compass Rose module 6.x-1.x before 6.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to "embedding a JavaSc…CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01271 · Published 2017-10-02 · No fix listed CWE-79