CVE-2014-8743

Currently unrated 🤨

Key Information

Vendor
Drupal
Status
Maestro
Vendor
CVE Published:
13 October 2014

Summary

Multiple cross-site scripting (XSS) vulnerabilities in the Maestro module 7.x-1.x before 7.x-1.4 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via a (1) Role or (2) Organic Group name.

Refferences

https://www.drupal.org/node/2013653
x_refsource_CONFIRM
http://secunia.com/advisories/56790
third-party-advisoryx_refsource_SECUNIA
https://drupal.org/node/2200453
x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/91274
vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/65677
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.