Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Priority LOW 14

Cross-site scripting (XSS) vulnerability in the MailChimp Signup submodule in the MailChimp module 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "administer mailchimp" permission to inject…

CVSS 2.0LOW 2.1 Network Low privileges Interaction — EPSS 0.01405 Published 2015-08-18 No fix listed CWE-79
Priority LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in the MailChimp module 7.x-2.x before 7.x-2.7 for Drupal allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) a predictable "webhoo…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01161 Published 2012-12-03 No fix listed CWE-79