CVE

Id
81654  
CVE No.
CVE-2015-4377  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Petition module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users with the "create petition" permission to inject arbitrary web script or HTML via unknown vectors.  
Phase
Assigned (20150605)  
Votes
None (candidate not yet proposed)  
Comments