Read the docs

Profile2 Privacy Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Profile2 Privacy Project records in CISA KEV

No Profile2 Privacy Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Profile2 Privacy · all components

Priority LOW 19

Cross-site scripting (XSS) vulnerability in the Profile2 Privacy module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with the "Administer Profile2 Privacy Levels" permission to inject arbitrary web…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00946 Published 2015-06-15 No fix listed CWE-79
Open these records in search →