TI-2015-03665 CVE-2015-4367 · GHSA-5phm-p285-63ffCross-site scripting (XSS) vulnerability in the Simple Subscription module before 6.x-1.1…Priority LOW 19Cross-site scripting (XSS) vulnerability in the Simple Subscription module before 6.x-1.1 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer blocks" permission to inject arbitrar…CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.00946 · Published 2015-06-15 · No fix listed CWE-79