Lucene search
MitreCVE-2015-4370HistoryJun 15, 2015 - 2:59 p.m.
CVE-2015-4370
2015-06-1514:59:29
CWE-79
mitre
web.nvd.nist.gov
21
cve-2015-4370
cross-site scripting
xss vulnerability
site documentation module
drupal
remote authenticated users
web script
html
taxonomy terms
nvd
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.4
Confidence
High
EPSS
0.001
Percentile
41.9%
Cross-site scripting (XSS) vulnerability in the Site Documentation module before 6.x-1.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to taxonomy terms.
Affected configurations
Node
site_documentation_projectsite_documentationRange≤6.x-1.4drupal
| Vendor | Product | Version | CPE |
|---|---|---|---|
| site_documentation_project | site_documentation | * | cpe:2.3:a:site_documentation_project:site_documentation:*:*:*:*:*:drupal:*:* |
Related
drupal
drupal
SA-CONTRIB-2015-074 - Site Documentation - Cross Site Scripting (XSS)
2015-03-11 00:00:00
nvd
nvd
CVE-2015-4370
2015-06-15 14:59:29
cvelist
cvelist
CVE-2015-4370
2015-06-15 14:00:00
prion
prion
Cross site scripting
2015-06-15 14:59:00
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.4
Confidence
High
EPSS
0.001
Percentile
41.9%
Related for CVE-2015-4370