Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Wishlist Project Component: Wishlist Clear all filters
TI-2015-02968 CVE-2015-3357 · GHSA-c8jw-jmv9-x2gf

Cross-site scripting (XSS) vulnerability in the Wishlist module before 6.x-2.7 and…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in the Wishlist module before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal allows remote authenticated users with the "access wishlists" permission to inject arbitrary web script…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00946 Published 2015-04-21 No fix listed CWE-79
TI-2015-02965 CVE-2015-3354 · GHSA-75hw-fjjp-785q

Cross-site request forgery (CSRF) vulnerability in the Wishlist module before 6.x-2.7 and…

Priority LOW 27

Cross-site request forgery (CSRF) vulnerability in the Wishlist module before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that delete…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.00643 Published 2015-04-21 No fix listed CWE-352