Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2015-6665
HistoryAug 24, 2015 - 2:59 p.m.

CVE-2015-6665

2015-08-2414:59:00
Debian Security Bug Tracker
security-tracker.debian.org
7

0.003 Low

EPSS

Percentile

71.4%

Cross-site scripting (XSS) vulnerability in the Ajax handler in Drupal 7.x before 7.39 and the Ctools module 6.x-1.x before 6.x-1.14 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors involving a whitelisted HTML element, possibly related to the “a” tag.

OSVersionArchitecturePackageVersionFilename
Debian9alldrupal7< 7.52-2+deb9u11drupal7_7.52-2+deb9u11_all.deb