Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Fourkitchens Component: Block Class Clear all filters
TI-2016-02636 CVE-2016-3144 · GHSA-fp3q-mvf3-ggq3

Cross-site scripting (XSS) vulnerability in the Block Class module 7.x-2.x before 7.x-2.2…

Priority LOW 27

Cross-site scripting (XSS) vulnerability in the Block Class module 7.x-2.x before 7.x-2.2 for Drupal allows remote authenticated users with the "Administer block classes" permission to inject arbitrary web script or HTML…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01116 Published 2016-04-15 No fix listed CWE-79
TI-2012-01446 CVE-2012-1657 · GHSA-72fr-c7pw-pqmv

Cross-site scripting (XSS) vulnerability in block_class.module in the Block Class module…

Priority LOW 14

Cross-site scripting (XSS) vulnerability in block_class.module in the Block Class module before 7.x-1.1 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the…

CVSS 2.0LOW 2.1 Network Low privileges Interaction — EPSS 0.01607 Published 2012-09-18 No fix listed CWE-79