Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Webform Project Component: Webform Clear all filters
TI-2015-03672 CVE-2015-4374 · GHSA-8c9c-rccv-p938

Cross-site scripting (XSS) vulnerability in the Webform module before 6.x-3.23, 7.x-3.x…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in the Webform module before 6.x-3.23, 7.x-3.x before 7.x-3.23, and 7.x-4.x before 7.x-4.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrar…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.0107 Published 2015-06-16 No fix listed CWE-79
TI-2015-03655 CVE-2015-4357 · GHSA-2m3x-c3pv-g7qv

Cross-site scripting (XSS) vulnerability in the Webform module before 6.x-3.22, 7.x-3.x…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in the Webform module before 6.x-3.22, 7.x-3.x before 7.x-3.22, and 7.x-4.x before 7.x-4.4 for Drupal allows remote authenticated users with certain permissions to inject arbitrar…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.0107 Published 2015-06-15 No fix listed CWE-79
TI-2015-03654 CVE-2015-4356 · GHSA-5cc3-g726-g82v

Cross-site scripting (XSS) vulnerability in the view-based webform results table in the…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in the view-based webform results table in the Webform module 7.x-4.x before 7.x-4.4 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00946 Published 2015-06-15 No fix listed CWE-79
TI-2014-06838 CVE-2014-8318 · GHSA-7xfm-2fch-76cj

Cross-site scripting (XSS) vulnerability in the Webform module 6.x-3.x before 6.x-3.20…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in the Webform module 6.x-3.x before 6.x-3.20, 7.x-3.x before 7.x-3.20, and 7.x-4.x before 7.x-4.0-beta2 for Drupal allows remote authenticated users with certain permissions to i…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01095 Published 2014-10-17 No fix listed CWE-79