TI-2015-01872 CVE-2015-2086 · GHSA-2hp3-89rw-p99pCross-site scripting (XSS) vulnerability in the live preview in the Panopoly Magic module…Priority LOW 19Cross-site scripting (XSS) vulnerability in the live preview in the Panopoly Magic module before 7.x-1.17 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a pane title.CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.00936 · Published 2015-02-26 · No fix listed CWE-79