Vulnerabilities

TI-2015-02983 CVE-2015-3372 · GHSA-45gq-7r9r-374v

Cross-site scripting (XSS) vulnerability in the Node Invite module before 6.x-2.5 for…

LOW 19

Cross-site scripting (XSS) vulnerability in the Node Invite module before 6.x-2.5 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a node title.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00946 Published 2015-04-21 No fix listed CWE-79

TI-2015-02982 CVE-2015-3371 · GHSA-4p8j-843q-8hfp

Open redirect vulnerability in the Node Invite module before 6.x-2.5 for Drupal allows…

LOW 28

Open redirect vulnerability in the Node Invite module before 6.x-2.5 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the destination parameter.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.0118 Published 2015-04-21 No fix listed

TI-2015-02981 CVE-2015-3370 · GHSA-9pgm-r44g-q4mp

Cross-site request forgery (CSRF) vulnerability in the Node Invite module before 6.x-2.5…

LOW 31

Cross-site request forgery (CSRF) vulnerability in the Node Invite module before 6.x-2.5 for Drupal allows remote attackers to hijack the authentication of users with the "node_invite_can_manage_invite" permission for re…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00643 Published 2015-04-21 No fix listed CWE-352

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in the Node Invite module before 6.x-2.5 for…

Open redirect vulnerability in the Node Invite module before 6.x-2.5 for Drupal allows…

Cross-site request forgery (CSRF) vulnerability in the Node Invite module before 6.x-2.5…