TI-2015-03670 CVE-2015-4372 · GHSA-vqx7-2q99-4q22Cross-site scripting (XSS) vulnerability in the Image Title module before 7.x-1.1 for…Priority LOW 19Cross-site scripting (XSS) vulnerability in the Image Title module before 7.x-1.1 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors.CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.00946 · Published 2015-06-15 · No fix listed CWE-79