Lucene search

K
cvelistMitreCVELIST:CVE-2015-2086
HistoryOct 03, 2022 - 4:16 p.m.

CVE-2015-2086

2022-10-0316:16:10
mitre
www.cve.org
1
cve-2015-2086
cross-site scripting
live preview
panopoly magic module
drupal
remote authenticated users
arbitrary web script
html
pane title

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.4%

Cross-site scripting (XSS) vulnerability in the live preview in the Panopoly Magic module before 7.x-1.17 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a pane title.

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.4%

Related for CVELIST:CVE-2015-2086