TI-2015-03644 CVE-2015-4346 · GHSA-29fm-h5wx-rm6qCross-site scripting (XSS) vulnerability in the SMS Framework module 6.x-1.x before…Priority LOW 16Cross-site scripting (XSS) vulnerability in the SMS Framework module 6.x-1.x before 6.x-1.1 for Drupal, when the "Send to phone" submodule is enabled, allows remote attackers to inject arbitrary web script or HTML via un…CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.01155 · Published 2015-06-15 · No fix listed CWE-79
