TI-2015-06549 CVE-2015-7879 · GHSA-r5vw-pf7p-6hgjCross-site scripting (XSS) vulnerability in the Stickynote module 7.x before 7.x-1.3 for…Priority LOW 26Cross-site scripting (XSS) vulnerability in the Stickynote module 7.x before 7.x-1.3 for Drupal allows remote authenticated users with permission to create or edit a stickynote to inject arbitrary web script or HTML via…CVSS 3.0MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00887 · Published 2017-09-11 · No fix listed CWE-79