⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2015-3386

LOW · 3.5 CVSS Gepubliceerd: 21-04-2015 CWE-79

Beschrijving

Cross-site scripting (XSS) vulnerability in the Node Access Product module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a node title.

Vendors

Node Access Product Project

Affected products

Node Access Product

References

www.openwall.com
www.securityfocus.com
www.drupal.org