TI-2015-05708 CVE-2015-6807 · GHSA-8cf4-hxfr-hf4hCross-site scripting (XSS) vulnerability in the Mass Contact module 6.x-1.x before…Priority LOW 13Cross-site scripting (XSS) vulnerability in the Mass Contact module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer mass contact" permission to inject a…CVSS 2.0LOW 2.1· Network · Low privileges · Interaction — · EPSS 0.00949 · Published 2015-09-04 · No fix listed CWE-79