Vulnerability Details CVE-2015-3344
Cross-site scripting (XSS) vulnerability in the Course module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a node title.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 46.0%
CVSS Severity
CVSS v2 Score 3.5
References
- http://www.openwall.com/lists/oss-security/2015/01/29/6
- http://www.securityfocus.com/bid/72631
- https://www.drupal.org/node/2403305
- https://www.drupal.org/node/2403309
- https://www.drupal.org/node/2403333
- http://www.openwall.com/lists/oss-security/2015/01/29/6
- http://www.securityfocus.com/bid/72631
- https://www.drupal.org/node/2403305
- https://www.drupal.org/node/2403309
- https://www.drupal.org/node/2403333
Products affected by CVE-2015-3344
-
cpe:2.3:a:dlc_solutions:course:6.x-1.0-alpha1
-
cpe:2.3:a:dlc_solutions:course:6.x-1.0-rc1
-
cpe:2.3:a:dlc_solutions:course:6.x-1.0-rc10
-
cpe:2.3:a:dlc_solutions:course:6.x-1.0-rc2
-
cpe:2.3:a:dlc_solutions:course:6.x-1.0-rc3
-
cpe:2.3:a:dlc_solutions:course:6.x-1.0-rc4
-
cpe:2.3:a:dlc_solutions:course:6.x-1.0-rc5
-
cpe:2.3:a:dlc_solutions:course:6.x-1.0-rc6
-
cpe:2.3:a:dlc_solutions:course:6.x-1.0-rc7
-
cpe:2.3:a:dlc_solutions:course:6.x-1.0-rc8
-
cpe:2.3:a:dlc_solutions:course:6.x-1.0-rc9
-
cpe:2.3:a:dlc_solutions:course:6.x-1.1
-
cpe:2.3:a:dlc_solutions:course:6.x-1.x-dev
-
cpe:2.3:a:dlc_solutions:course:7.x-1.0
-
cpe:2.3:a:dlc_solutions:course:7.x-1.0-alpha1
-
cpe:2.3:a:dlc_solutions:course:7.x-1.0-alpha2
-
cpe:2.3:a:dlc_solutions:course:7.x-1.0-alpha3
-
cpe:2.3:a:dlc_solutions:course:7.x-1.0-beta1
-
cpe:2.3:a:dlc_solutions:course:7.x-1.0-beta2
-
cpe:2.3:a:dlc_solutions:course:7.x-1.0-beta3
-
cpe:2.3:a:dlc_solutions:course:7.x-1.0-rc1
-
cpe:2.3:a:dlc_solutions:course:7.x-1.0-rc2
-
cpe:2.3:a:dlc_solutions:course:7.x-1.0-rc3
-
cpe:2.3:a:dlc_solutions:course:7.x-1.0-rc4
-
cpe:2.3:a:dlc_solutions:course:7.x-1.1
-
cpe:2.3:a:dlc_solutions:course:7.x-1.2
-
cpe:2.3:a:dlc_solutions:course:7.x-1.3
-
cpe:2.3:a:dlc_solutions:course:7.x-1.x-dev