TI-2015-03675 CVE-2015-4377 · GHSA-w3j2-7j6m-jpwrCross-site scripting (XSS) vulnerability in unspecified administration pages in the…Priority LOW 13Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Petition module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users with the "create petition" permission to inject arbi…CVSS 2.0LOW 2.1· Network · Low privileges · Interaction — · EPSS 0.00931 · Published 2015-06-15 · No fix listed CWE-79