Multiple cross-site scripting (XSS) vulnerabilities in Test/WorkArea/workarea.aspx in Ektron Content Management System (CMS) before 9.10 SP1 (Build 9.1.0.184.1.114) allow remote authenticated users to...

CWE-792015

CVE-2015-4395

LOW

CVSS:3.5(Low)

The HybridAuth Social Login module 7.x-2.x before 7.x-2.10 for Drupal stores passwords in plaintext when the "Ask user for a password when registering" option is enabled, which allows remote authentic...

CWE-2002015

CVE-2015-4392

LOW

CVSS:3.5(Low)

Cross-site scripting (XSS) vulnerability in the Display Suite module 7.x-2.7 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to fiel...

CWE-792015

CVE-2015-4388

LOW

CVSS:2.6(Low)

Cross-site scripting (XSS) vulnerability in the Current Search Links module 7.x-1.x before 7.x-1.1 for Drupal, when the "Append the keywords passed by the user to the list" option is disabled, allows ...

CWE-792015

CVE-2015-4387

LOW

CVSS:2.6(Low)

Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Password Policy module 6.x-1.x before 6.x-1.11 and 7.x-1.x before 7.x-1.11 for Drupal, when a site has a policy that...

CWE-792015

CVE-2015-4385

LOW

CVSS:2.1(Low)

Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Imagefield Info module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the "Administer imag...

CWE-792015

CVE-2015-4384

LOW

CVSS:3.5(Low)

Cross-site scripting (XSS) vulnerability in the Ubercart Webform Checkout Pane module 6.x-3.x before 6.x-3.10 and 7.x-3.x before 7.x-3.11 for Drupal allows remote authenticated users with certain perm...

CWE-792015

CVE-2015-4381

LOW

CVSS:3.5(Low)

Cross-site scripting (XSS) vulnerability in the Invoice module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allows remote authenticated users with the "Administer own invoices" permiss...

CWE-792015

CVE-2015-4380

LOW

CVSS:3.5(Low)

Cross-site scripting (XSS) vulnerability in the Linear Case module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML v...

CWE-792015

CVE-2015-4378

LOW

CVSS:2.1(Low)

Cross-site scripting (XSS) vulnerability in the Crumbs module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with the "Administer Crumbs" permission to inject arbitrary web script...

CWE-792015

CVE-2015-4377

LOW

CVSS:2.1(Low)

Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Petition module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users with the "create petition" permi...

CWE-792015

CVE-2015-4376

LOW

CVSS:3.5(Low)

Cross-site scripting (XSS) vulnerability in the Profile2 Privacy module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with the "Administer Profile2 Privacy Levels" permission to ...

CWE-792015

CVE-2015-4374

LOW

CVSS:3.5(Low)

Cross-site scripting (XSS) vulnerability in the Webform module before 6.x-3.23, 7.x-3.x before 7.x-3.23, and 7.x-4.x before 7.x-4.5 for Drupal allows remote authenticated users with certain permission...

CWE-792015

CVE-2015-4373

LOW

CVSS:3.5(Low)

Cross-site scripting (XSS) vulnerability in the OG tabs module before 7.x-1.1 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors r...

CWE-792015

CVE-2015-4372

LOW

CVSS:3.5(Low)

Cross-site scripting (XSS) vulnerability in the Image Title module before 7.x-1.1 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspe...

CWE-792015

CVE-2015-4370

LOW

CVSS:3.5(Low)

Cross-site scripting (XSS) vulnerability in the Site Documentation module before 6.x-1.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML vi...

CWE-792015

CVE-2015-4369

LOW

CVSS:3.5(Low)

Cross-site scripting (XSS) vulnerability in the Trick Question module before 6.x-1.5 and 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with the "Administer Trick Question" permis...

CWE-792015

CVE-2015-4367

LOW

CVSS:3.5(Low)

Cross-site scripting (XSS) vulnerability in the Simple Subscription module before 6.x-1.1 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer blocks" permissio...

CWE-792015

CVE-2015-4366

LOW

CVSS:3.5(Low)

Cross-site scripting (XSS) vulnerability in the Mover module 6.x-1.0 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vector...

CWE-792015

CVE-2015-4365

LOW

CVSS:3.5(Low)

Cross-site scripting (XSS) vulnerability in the Taxonomy Accordion module for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors relat...

CWE-792015

CVE-2015-4359

LOW

CVSS:3.5(Low)

Multiple cross-site scripting (XSS) vulnerabilities in the Registration codes module before 6.x-1.6, 6.x-2.x before 6.x-2.8, and 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with...

CWE-792015

CVE-2015-4358

LOW

CVSS:3.5(Low)

Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Ubercart Discount Coupons module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with certain pe...

CWE-792015

CVE-2015-4357

LOW

CVSS:3.5(Low)

Cross-site scripting (XSS) vulnerability in the Webform module before 6.x-3.22, 7.x-3.x before 7.x-3.22, and 7.x-4.x before 7.x-4.4 for Drupal allows remote authenticated users with certain permission...

CWE-792015

CVE-2015-4356

LOW

CVSS:3.5(Low)

Cross-site scripting (XSS) vulnerability in the view-based webform results table in the Webform module 7.x-4.x before 7.x-4.4 for Drupal allows remote authenticated users with certain permissions to i...

CWE-792015