TI-2015-04637 CVE-2015-5507 · GHSA-g2x7-rq6p-w7ggCross-site scripting (XSS) vulnerability in the Inline Entity Form module 7.x-1.x before…Priority LOW 24Cross-site scripting (XSS) vulnerability in the Inline Entity Form module 7.x-1.x before 7.x-1.6 for Drupal allows remote authenticated users with permission to create or edit fields to inject arbitrary web script or HTM…CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01821 · Published 2015-08-18 · No fix listed CWE-79