Filtered by vendor Inline Entity Form Project Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2015-5507 1 Inline Entity Form Project 1 Inline Entity Form 2024-11-21 N/A
Cross-site scripting (XSS) vulnerability in the Inline Entity Form module 7.x-1.x before 7.x-1.6 for Drupal allows remote authenticated users with permission to create or edit fields to inject arbitrary web script or HTML via unspecified vectors.