XSS Vulnerability in Ubercart Webform Integration Module for Drupal
CVE-2015-4354

Currently unrated

Key Information:

Vendor: Ubercart Webform Integration Project
Status: Ubercart Webform Integration
Vendor: CVE Published:; 15 June 2015

🔔 Create Ubercart Webform Integration Project Vulnerability Alert

What is CVE-2015-4354?

The Ubercart Webform Integration module for Drupal is susceptible to a cross-site scripting (XSS) vulnerability. This flaw allows remote authenticated users with certain permissions to execute arbitrary web scripts or inject HTML, potentially compromising the site's integrity. The vulnerability exists in versions prior to 6.x-1.8 and 7.x-2.4, and it poses a significant risk where an attacker can manipulate the web application by exploiting this weakness.

References

http://www.securityfocus.com/bid/72812

vdb-entryx_refsource_BID

https://www.drupal.org/node/2463199

x_refsource_CONFIRM

https://www.drupal.org/node/2437991

x_refsource_MISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 15, 2015
Vulnerability Reserved
Jun 5, 2015

CVE-2015-4354 Data

JSON