TI-2015-03674 CVE-2015-4376 · GHSA-cxg2-664m-h86jCross-site scripting (XSS) vulnerability in the Profile2 Privacy module 7.x-1.x before…Priority LOW 19Cross-site scripting (XSS) vulnerability in the Profile2 Privacy module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with the "Administer Profile2 Privacy Levels" permission to inject arbitrary web…CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.00946 · Published 2015-06-15 · No fix listed CWE-79