TI-2009-03716 CVE-2009-3914 · GHSA-xg5q-c6fr-w959Cross-site scripting (XSS) vulnerability in the Temporary Invitation module 5.x before…Priority LOW 23Cross-site scripting (XSS) vulnerability in the Temporary Invitation module 5.x before 5.x-2.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the Name field in an invitation.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01241 · Published 2009-11-09 · No fix listed CWE-79
