Vulnerabilities

TI-2013-05063 CVE-2013-5938 · GHSA-3m86-93x9-px5r

Cross-site scripting (XSS) vulnerability in the Click2Sell Suite module 6.x-1.x for…

LOW 22

Cross-site scripting (XSS) vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to inject arbitrary web script or HTML via a confirmation form.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01161 Published 2013-09-25 No fix listed CWE-79

TI-2013-05062 CVE-2013-5937 · GHSA-chr9-m3cf-vvxr

Cross-site request forgery (CSRF) vulnerability in the Click2Sell Suite module 6.x-1.x…

LOW 31

Cross-site request forgery (CSRF) vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete database information via v…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00643 Published 2013-09-25 No fix listed CWE-352

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in the Click2Sell Suite module 6.x-1.x for…

Cross-site request forgery (CSRF) vulnerability in the Click2Sell Suite module 6.x-1.x…