Wimleers » Hierarchical Select : Security Vulnerabilities, CVEs,
Cross-site scripting (XSS) vulnerability in the Hierarchical Select module 6.x-3.x before 6.x-3.8 for Drupal allows remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML via unspecified vectors related to "the vocabulary's help text."
Max CVSS
2.1
EPSS Score
0.11%
Published
2012-09-19
Updated
2017-08-29
Cross-site scripting (XSS) vulnerability in the Hierarchical Select module 5.x before 5.x-3.2 and 6.x before 6.x-3.2 for Drupal allows remote authenticated users, with administer taxonomy permissions, to inject arbitrary web script or HTML via unspecified vectors in the hierarchical_select form.
Max CVSS
2.1
EPSS Score
0.11%
Published
2010-07-13
Updated
2017-08-17
2 vulnerabilities found