Vulnerabilities (CVE)

Filtered by vendor Inline Entity Form Project Subscribe
Filtered by product Inline Entity Form
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-5507 1 Inline Entity Form Project 1 Inline Entity Form 2024-02-04 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in the Inline Entity Form module 7.x-1.x before 7.x-1.6 for Drupal allows remote authenticated users with permission to create or edit fields to inject arbitrary web script or HTML via unspecified vectors.