Search vulnerabilities

Results 2

Export CSV
CVE-2010-2724

Cross-site scripting (XSS) vulnerability in the Hierarchical Select module 5.x before 5.x-3.2 and 6.x before 6.x-3.2 for Drupal allows remote authenticated users, with administer taxonomy permissions, to inject arbitrary web script or HTML via unspecified vectors in the hierarchical_select form.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
CVE-2012-1652

Cross-site scripting (XSS) vulnerability in the Hierarchical Select module 6.x-3.x before 6.x-3.8 for Drupal allows remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML via unspecified vectors related to "the vocabulary's help text."

CVSS 2.0 · 2.1 Low EPSS 1.1% KEV · Not listed