Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Steven Jones Component: Context Clear all filters
TI-2013-03897 CVE-2013-4445 · GHSA-86q5-5pcw-rm5q

The json rendering functionality in the Context module 6.x-2.x before 6.x-3.2 and 7.x-3.x…

Priority LOW 26

The json rendering functionality in the Context module 6.x-2.x before 6.x-3.2 and 7.x-3.x before 7.x-3.0 for Drupal uses Drupal's token scheme to restrict access to blocks, which makes it easier for remote authenticated…

CVSS 2.0MEDIUM 4.9 Network Low privileges Interaction — EPSS 0.01569 Published 2013-12-07 No fix listed CWE-264
TI-2010-01528 CVE-2010-1584 · GHSA-vxm7-x8xr-qhrj

Cross-site scripting (XSS) vulnerability in the Context module before 6.x-2.0-rc4 for…

Priority LOW 14

Cross-site scripting (XSS) vulnerability in the Context module before 6.x-2.0-rc4 for Drupal allows remote authenticated users, with Administer Blocks privileges, to inject arbitrary web script or HTML via a block descri…

CVSS 2.0LOW 2.1 Network Low privileges Interaction — EPSS 0.01289 Published 2010-05-18 No fix listed CWE-79