Vulnerability Details CVE-2015-7878
Cross-site scripting (XSS) vulnerability in the Taxonomy Find module 6.x-2.x through 6.x-1.2 and 7.x-2.x through 7.x-1.0 in Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via taxonomy vocabulary and term names.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 35.2%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 3.5
Products affected by CVE-2015-7878
-
cpe:2.3:a:taxonomy_find_project:taxonomy_find:6.x-1.0
-
cpe:2.3:a:taxonomy_find_project:taxonomy_find:6.x-1.1
-
cpe:2.3:a:taxonomy_find_project:taxonomy_find:6.x-1.2
-
cpe:2.3:a:taxonomy_find_project:taxonomy_find:7.x-1.0