Cross-site scripting (XSS) vulnerability in the Ajax handler in Drupal 7.x before 7.39…
Priority LOW 25CWE-79Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- None · Partial · None
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-79.
Summary
Cross-site scripting (XSS) vulnerability in the Ajax handler in Drupal 7.x before 7.39 and the Ctools module 6.x-1.x before 6.x-1.14 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors involving a whitelisted HTML element, possibly related to the "a" tag.
Why it matters now
EPSS 0.02677 85th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 78
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:* | 21 | Vulnerable | Fedoraproject |
| cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:* | 22 | Vulnerable | Fedoraproject |
| cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:* | 23 | Vulnerable | Fedoraproject |
| cpe:2.3:a:drupal:drupal:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.0:alpha1:*:*:*:*:*:* | 7.0 alpha1 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.0:alpha2:*:*:*:*:*:* | 7.0 alpha2 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.0:alpha3:*:*:*:*:*:* | 7.0 alpha3 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.0:alpha4:*:*:*:*:*:* | 7.0 alpha4 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.0:alpha5:*:*:*:*:*:* | 7.0 alpha5 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.0:alpha6:*:*:*:*:*:* | 7.0 alpha6 | Vulnerable | Drupal |
- cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:* Versions 21 Vulnerable ·Fedoraproject
- cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:* Versions 22 Vulnerable ·Fedoraproject
- cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:* Versions 23 Vulnerable ·Fedoraproject
- cpe:2.3:a:drupal:drupal:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.0:alpha1:*:*:*:*:*:* Versions 7.0 alpha1 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.0:alpha2:*:*:*:*:*:* Versions 7.0 alpha2 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.0:alpha3:*:*:*:*:*:* Versions 7.0 alpha3 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.0:alpha4:*:*:*:*:*:* Versions 7.0 alpha4 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.0:alpha5:*:*:*:*:*:* Versions 7.0 alpha5 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.0:alpha6:*:*:*:*:*:* Versions 7.0 alpha6 Vulnerable ·Drupal
Show 68 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:drupal:drupal:7.0:alpha7:*:*:*:*:*:* | 7.0 alpha7 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.0:beta1:*:*:*:*:*:* | 7.0 beta1 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.0:beta2:*:*:*:*:*:* | 7.0 beta2 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.0:beta3:*:*:*:*:*:* | 7.0 beta3 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.0:dev:*:*:*:*:*:* | 7.0 dev | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.0:rc1:*:*:*:*:*:* | 7.0 rc1 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.0:rc2:*:*:*:*:*:* | 7.0 rc2 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.0:rc3:*:*:*:*:*:* | 7.0 rc3 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.0:rc4:*:*:*:*:*:* | 7.0 rc4 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.1:*:*:*:*:*:*:* | 7.1 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.2:*:*:*:*:*:*:* | 7.2 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.3:*:*:*:*:*:*:* | 7.3 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.4:*:*:*:*:*:*:* | 7.4 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.5:*:*:*:*:*:*:* | 7.5 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.6:*:*:*:*:*:*:* | 7.6 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.7:*:*:*:*:*:*:* | 7.7 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.8:*:*:*:*:*:*:* | 7.8 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.9:*:*:*:*:*:*:* | 7.9 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.10:*:*:*:*:*:*:* | 7.10 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.11:*:*:*:*:*:*:* | 7.11 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.12:*:*:*:*:*:*:* | 7.12 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.13:*:*:*:*:*:*:* | 7.13 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.14:*:*:*:*:*:*:* | 7.14 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.15:*:*:*:*:*:*:* | 7.15 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.16:*:*:*:*:*:*:* | 7.16 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.17:*:*:*:*:*:*:* | 7.17 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.18:*:*:*:*:*:*:* | 7.18 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.19:*:*:*:*:*:*:* | 7.19 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.20:*:*:*:*:*:*:* | 7.20 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.21:*:*:*:*:*:*:* | 7.21 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.22:*:*:*:*:*:*:* | 7.22 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.23:*:*:*:*:*:*:* | 7.23 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.24:*:*:*:*:*:*:* | 7.24 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.25:*:*:*:*:*:*:* | 7.25 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.26:*:*:*:*:*:*:* | 7.26 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.27:*:*:*:*:*:*:* | 7.27 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.28:*:*:*:*:*:*:* | 7.28 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.29:*:*:*:*:*:*:* | 7.29 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.30:*:*:*:*:*:*:* | 7.30 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.33:*:*:*:*:*:*:* | 7.33 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.34:*:*:*:*:*:*:* | 7.34 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.35:*:*:*:*:*:*:* | 7.35 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.36:*:*:*:*:*:*:* | 7.36 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.37:*:*:*:*:*:*:* | 7.37 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.38:*:*:*:*:*:*:* | 7.38 | Vulnerable | Drupal |
| cpe:2.3:a:drupal:drupal:7.x-dev:*:*:*:*:*:*:* | 7.x-dev | Vulnerable | Drupal |
| cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:*:*:*:*:drupal:*:* | 6.x-1.0 | Vulnerable | Chaos Tool Suite Project |
| cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:alpha1:*:*:*:drupal:*:* | 6.x-1.0 alpha1 | Vulnerable | Chaos Tool Suite Project |
| cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:alpha2:*:*:*:drupal:*:* | 6.x-1.0 alpha2 | Vulnerable | Chaos Tool Suite Project |
| cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:alpha3:*:*:*:drupal:*:* | 6.x-1.0 alpha3 | Vulnerable | Chaos Tool Suite Project |
| cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:beta1:*:*:*:drupal:*:* | 6.x-1.0 beta1 | Vulnerable | Chaos Tool Suite Project |
| cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:beta2:*:*:*:drupal:*:* | 6.x-1.0 beta2 | Vulnerable | Chaos Tool Suite Project |
| cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:beta3:*:*:*:drupal:*:* | 6.x-1.0 beta3 | Vulnerable | Chaos Tool Suite Project |
| cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:beta4:*:*:*:drupal:*:* | 6.x-1.0 beta4 | Vulnerable | Chaos Tool Suite Project |
| cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:rc1:*:*:*:drupal:*:* | 6.x-1.0 rc1 | Vulnerable | Chaos Tool Suite Project |
| cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.1:*:*:*:*:drupal:*:* | 6.x-1.1 | Vulnerable | Chaos Tool Suite Project |
| cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.2:*:*:*:*:drupal:*:* | 6.x-1.2 | Vulnerable | Chaos Tool Suite Project |
| cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.3:*:*:*:*:drupal:*:* | 6.x-1.3 | Vulnerable | Chaos Tool Suite Project |
| cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.4:*:*:*:*:drupal:*:* | 6.x-1.4 | Vulnerable | Chaos Tool Suite Project |
| cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.5:*:*:*:*:drupal:*:* | 6.x-1.5 | Vulnerable | Chaos Tool Suite Project |
| cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.6:*:*:*:*:drupal:*:* | 6.x-1.6 | Vulnerable | Chaos Tool Suite Project |
| cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.7:*:*:*:*:drupal:*:* | 6.x-1.7 | Vulnerable | Chaos Tool Suite Project |
| cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.8:*:*:*:*:drupal:*:* | 6.x-1.8 | Vulnerable | Chaos Tool Suite Project |
| cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.9:*:*:*:*:drupal:*:* | 6.x-1.9 | Vulnerable | Chaos Tool Suite Project |
| cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.11:*:*:*:*:drupal:*:* | 6.x-1.11 | Vulnerable | Chaos Tool Suite Project |
| cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.12:*:*:*:*:drupal:*:* | 6.x-1.12 | Vulnerable | Chaos Tool Suite Project |
| cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.13:*:*:*:*:drupal:*:* | 6.x-1.13 | Vulnerable | Chaos Tool Suite Project |
| cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.x:dev:*:*:*:drupal:*:* | 6.x-1.x dev | Vulnerable | Chaos Tool Suite Project |
- cpe:2.3:a:drupal:drupal:7.0:alpha7:*:*:*:*:*:* Versions 7.0 alpha7 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.0:beta1:*:*:*:*:*:* Versions 7.0 beta1 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.0:beta2:*:*:*:*:*:* Versions 7.0 beta2 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.0:beta3:*:*:*:*:*:* Versions 7.0 beta3 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.0:dev:*:*:*:*:*:* Versions 7.0 dev Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.0:rc1:*:*:*:*:*:* Versions 7.0 rc1 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.0:rc2:*:*:*:*:*:* Versions 7.0 rc2 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.0:rc3:*:*:*:*:*:* Versions 7.0 rc3 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.0:rc4:*:*:*:*:*:* Versions 7.0 rc4 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.1:*:*:*:*:*:*:* Versions 7.1 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.5:*:*:*:*:*:*:* Versions 7.5 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.7:*:*:*:*:*:*:* Versions 7.7 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.8:*:*:*:*:*:*:* Versions 7.8 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.9:*:*:*:*:*:*:* Versions 7.9 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.10:*:*:*:*:*:*:* Versions 7.10 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.11:*:*:*:*:*:*:* Versions 7.11 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.12:*:*:*:*:*:*:* Versions 7.12 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.13:*:*:*:*:*:*:* Versions 7.13 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.14:*:*:*:*:*:*:* Versions 7.14 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.15:*:*:*:*:*:*:* Versions 7.15 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.16:*:*:*:*:*:*:* Versions 7.16 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.17:*:*:*:*:*:*:* Versions 7.17 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.18:*:*:*:*:*:*:* Versions 7.18 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.19:*:*:*:*:*:*:* Versions 7.19 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.20:*:*:*:*:*:*:* Versions 7.20 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.21:*:*:*:*:*:*:* Versions 7.21 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.22:*:*:*:*:*:*:* Versions 7.22 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.23:*:*:*:*:*:*:* Versions 7.23 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.24:*:*:*:*:*:*:* Versions 7.24 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.25:*:*:*:*:*:*:* Versions 7.25 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.26:*:*:*:*:*:*:* Versions 7.26 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.27:*:*:*:*:*:*:* Versions 7.27 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.28:*:*:*:*:*:*:* Versions 7.28 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.29:*:*:*:*:*:*:* Versions 7.29 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.30:*:*:*:*:*:*:* Versions 7.30 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.33:*:*:*:*:*:*:* Versions 7.33 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.34:*:*:*:*:*:*:* Versions 7.34 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.35:*:*:*:*:*:*:* Versions 7.35 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.36:*:*:*:*:*:*:* Versions 7.36 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.37:*:*:*:*:*:*:* Versions 7.37 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.38:*:*:*:*:*:*:* Versions 7.38 Vulnerable ·Drupal
- cpe:2.3:a:drupal:drupal:7.x-dev:*:*:*:*:*:*:* Versions 7.x-dev Vulnerable ·Drupal
- cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:*:*:*:*:drupal:*:* Versions 6.x-1.0 Vulnerable ·Chaos Tool Suite Project
- cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:alpha1:*:*:*:drupal:*:* Versions 6.x-1.0 alpha1 Vulnerable ·Chaos Tool Suite Project
- cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:alpha2:*:*:*:drupal:*:* Versions 6.x-1.0 alpha2 Vulnerable ·Chaos Tool Suite Project
- cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:alpha3:*:*:*:drupal:*:* Versions 6.x-1.0 alpha3 Vulnerable ·Chaos Tool Suite Project
- cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:beta1:*:*:*:drupal:*:* Versions 6.x-1.0 beta1 Vulnerable ·Chaos Tool Suite Project
- cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:beta2:*:*:*:drupal:*:* Versions 6.x-1.0 beta2 Vulnerable ·Chaos Tool Suite Project
- cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:beta3:*:*:*:drupal:*:* Versions 6.x-1.0 beta3 Vulnerable ·Chaos Tool Suite Project
- cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:beta4:*:*:*:drupal:*:* Versions 6.x-1.0 beta4 Vulnerable ·Chaos Tool Suite Project
- cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:rc1:*:*:*:drupal:*:* Versions 6.x-1.0 rc1 Vulnerable ·Chaos Tool Suite Project
- cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.1:*:*:*:*:drupal:*:* Versions 6.x-1.1 Vulnerable ·Chaos Tool Suite Project
- cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.2:*:*:*:*:drupal:*:* Versions 6.x-1.2 Vulnerable ·Chaos Tool Suite Project
- cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.3:*:*:*:*:drupal:*:* Versions 6.x-1.3 Vulnerable ·Chaos Tool Suite Project
- cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.4:*:*:*:*:drupal:*:* Versions 6.x-1.4 Vulnerable ·Chaos Tool Suite Project
- cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.5:*:*:*:*:drupal:*:* Versions 6.x-1.5 Vulnerable ·Chaos Tool Suite Project
- cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.6:*:*:*:*:drupal:*:* Versions 6.x-1.6 Vulnerable ·Chaos Tool Suite Project
- cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.7:*:*:*:*:drupal:*:* Versions 6.x-1.7 Vulnerable ·Chaos Tool Suite Project
- cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.8:*:*:*:*:drupal:*:* Versions 6.x-1.8 Vulnerable ·Chaos Tool Suite Project
- cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.9:*:*:*:*:drupal:*:* Versions 6.x-1.9 Vulnerable ·Chaos Tool Suite Project
- cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.11:*:*:*:*:drupal:*:* Versions 6.x-1.11 Vulnerable ·Chaos Tool Suite Project
- cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.12:*:*:*:*:drupal:*:* Versions 6.x-1.12 Vulnerable ·Chaos Tool Suite Project
- cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.13:*:*:*:*:drupal:*:* Versions 6.x-1.13 Vulnerable ·Chaos Tool Suite Project
- cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.x:dev:*:*:*:drupal:*:* Versions 6.x-1.x dev Vulnerable ·Chaos Tool Suite Project
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Timeline
- 2026-10-02 Threatist record created from CVE-2015-6665
- 2026-10-03 Alias added: GHSA-fvm9-qc7j-544c
References
Sources
- CVE-2015-6665 · CVE Program
- CVE-2015-6665 · NVD
- FIRST EPSS
- GHSA-fvm9-qc7j-544c · GitHub Advisory Database · CC BY 4.0
- CVE-2015-6665 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences