TI-2014-04454 CVE-2014-5456 · GHSA-73qq-h522-ff25Cross-site scripting (XSS) vulnerability in the Social Stats module before 7.x-1.5 for…Priority LOW 13Cross-site scripting (XSS) vulnerability in the Social Stats module before 7.x-1.5 for Drupal allows remote authenticated users with the "[Content Type]: Create new content" permission to inject arbitrary web script or H…CVSS 2.0LOW 2.1· Network · Low privileges · Interaction — · EPSS 0.00941 · Published 2014-08-25 · No fix listed CWE-79