CVE

Id
94391  
CVE No.
CVE-2016-7571  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Drupal 8.x before 8.1.10 allows remote attackers to inject arbitrary web script or HTML via vectors involving an HTTP exception.  
Phase
Assigned (20160909)  
Votes
None (candidate not yet proposed)  
Comments