Vulnerabilities

TI-2015-01402 CVE-2015-1568 · GHSA-vx6m-m75q-mhqp

Cross-site request forgery (CSRF) vulnerability in the GD Infinite Scroll module before…

LOW 31

Cross-site request forgery (CSRF) vulnerability in the GD Infinite Scroll module before 7.x-1.4 for Drupal allows remote attackers to hijack the authentication of users with the "edit gd infinite scroll settings" permiss…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00636 Published 2015-02-09 No fix listed CWE-352

TI-2015-01401 CVE-2015-1567 · GHSA-g6g2-8m65-j8v9

Cross-site scripting (XSS) vulnerability in the admin page in the GD Infinite Scroll…

LOW 22

Cross-site scripting (XSS) vulnerability in the admin page in the GD Infinite Scroll module before 7.x-1.4 for Drupal allows remote authenticated users with the "edit gd infinite scroll settings" permission to inject arb…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01148 Published 2015-02-09 No fix listed CWE-79

Vulnerabilities

Filters

Cross-site request forgery (CSRF) vulnerability in the GD Infinite Scroll module before…

Cross-site scripting (XSS) vulnerability in the admin page in the GD Infinite Scroll…