TI-2013-05084 CVE-2013-5964 · GHSA-7hf9-xmq4-prrqCross-site scripting (XSS) vulnerability in the administration page in the Flag module…Priority LOW 13Cross-site scripting (XSS) vulnerability in the administration page in the Flag module 7.x-3.x before 7.x-3.1 for Drupal allows remote authenticated users with the "Administer flags" permission to inject arbitrary web sc…CVSS 2.0LOW 2.1· Network · Low privileges · Interaction — · EPSS 0.00941 · Published 2013-09-30 · No fix listed CWE-79