Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Fourkitchens Clear all filters
TI-2016-02636 CVE-2016-3144 · GHSA-fp3q-mvf3-ggq3

Cross-site scripting (XSS) vulnerability in the Block Class module 7.x-2.x before 7.x-2.2…

Priority LOW 27

Cross-site scripting (XSS) vulnerability in the Block Class module 7.x-2.x before 7.x-2.2 for Drupal allows remote authenticated users with the "Administer block classes" permission to inject arbitrary web script or HTML…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01116 Published 2016-04-15 No fix listed CWE-79
TI-2012-01447 CVE-2012-1658 · GHSA-3cj6-xrqf-w8rv

Cross-site scripting (XSS) vulnerability in the Read More Link module 6.x-3.x before…

Priority LOW 13

Cross-site scripting (XSS) vulnerability in the Read More Link module 6.x-3.x before 6.x-3.1 for Drupal allows remote authenticated users with the access administration pages permission to inject arbitrary web script or…

CVSS 2.0LOW 2.1 Network Low privileges Interaction — EPSS 0.01064 Published 2012-09-18 No fix listed CWE-79
TI-2012-01446 CVE-2012-1657 · GHSA-72fr-c7pw-pqmv

Cross-site scripting (XSS) vulnerability in block_class.module in the Block Class module…

Priority LOW 14

Cross-site scripting (XSS) vulnerability in block_class.module in the Block Class module before 7.x-1.1 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the…

CVSS 2.0LOW 2.1 Network Low privileges Interaction — EPSS 0.01607 Published 2012-09-18 No fix listed CWE-79
TI-2010-01066 CVE-2010-1107 · GHSA-mvfg-j8w8-w54r

Cross-site scripting (XSS) vulnerability in the Recent Comments module 5.x through…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in the Recent Comments module 5.x through 5.x-1.2 and 6.x through 6.x-1.0 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a "custom block t…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01011 Published 2010-03-25 No fix listed CWE-79