CVE-2016-1565

Cross-site scripting (XSS) vulnerability in the Field Group module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with permission to…

published January 8, 2016

CVSS
—
EPSS
1%
Percentile
48.7
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in the Field Group module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with permission to configure field display settings to inject arbitrary web script or HTML via an element attribute.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00619 · 48.7th percentile
Published
2016-01-08T21:00Z
EPSS history
Timeline
  • 08 JAN 21:00Z
    Cross-site scripting (XSS) vulnerability in the Field Group module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with permission to…
    cvelistv5