Read the docs

Webform Project

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Webform Project records in CISA KEV

No Webform Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Webform 4 records LOW

Records

4 records in Webform · all components

TI-2015-03672 CVE-2015-4374 · GHSA-8c9c-rccv-p938

Cross-site scripting (XSS) vulnerability in the Webform module before 6.x-3.23, 7.x-3.x…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in the Webform module before 6.x-3.23, 7.x-3.x before 7.x-3.23, and 7.x-4.x before 7.x-4.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrar…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.0107 Published 2015-06-16 No fix listed CWE-79
TI-2015-03655 CVE-2015-4357 · GHSA-2m3x-c3pv-g7qv

Cross-site scripting (XSS) vulnerability in the Webform module before 6.x-3.22, 7.x-3.x…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in the Webform module before 6.x-3.22, 7.x-3.x before 7.x-3.22, and 7.x-4.x before 7.x-4.4 for Drupal allows remote authenticated users with certain permissions to inject arbitrar…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.0107 Published 2015-06-15 No fix listed CWE-79
TI-2015-03654 CVE-2015-4356 · GHSA-5cc3-g726-g82v

Cross-site scripting (XSS) vulnerability in the view-based webform results table in the…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in the view-based webform results table in the Webform module 7.x-4.x before 7.x-4.4 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00946 Published 2015-06-15 No fix listed CWE-79
TI-2014-06838 CVE-2014-8318 · GHSA-7xfm-2fch-76cj

Cross-site scripting (XSS) vulnerability in the Webform module 6.x-3.x before 6.x-3.20…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in the Webform module 6.x-3.x before 6.x-3.20, 7.x-3.x before 7.x-3.20, and 7.x-4.x before 7.x-4.0-beta2 for Drupal allows remote authenticated users with certain permissions to i…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01095 Published 2014-10-17 No fix listed CWE-79
Open these records in search →