Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Kristof De Jaeger Clear all filters
TI-2013-01944 CVE-2013-2177 · GHSA-43qw-p4wg-qvxr

Cross-site scripting (XSS) vulnerability in the Display Suite module 7.x-1.x before…

Priority LOW 22

Cross-site scripting (XSS) vulnerability in the Display Suite module 7.x-1.x before 7.x-1.7 and 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01161 Published 2013-06-25 No fix listed CWE-79
TI-2012-01846 CVE-2012-2073 · GHSA-38hc-j6w3-jg6w

The Bundle copy module 7.x-1.x before 7.x-1.1 for Drupal does not check for the "use PHP…

Priority LOW 30

The Bundle copy module 7.x-1.x before 7.x-1.1 for Drupal does not check for the "use PHP for settings" permission while importing settings, which allows remote authenticated users with certain permissions to execute arbi…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01821 Published 2012-08-14 No fix listed CWE-264