TI-2015-03684 CVE-2015-4386 · GHSA-xv86-3hxg-hv4rMultiple cross-site scripting (XSS) vulnerabilities in unspecified administration pages…Priority LOW 22Multiple cross-site scripting (XSS) vulnerabilities in unspecified administration pages in the EntityBulkDelete module 7.x-1.0 for Drupal allow remote attackers to inject arbitrary web script or HTML via unknown vectors…CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01161 · Published 2015-06-15 · No fix listed CWE-79