NVD

Id
17932  
Name
CVE-2016-1565  
Description
Cross-site scripting (XSS) vulnerability in the Field Group module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with permission to configure field display settings to inject arbitrary web script or HTML via an element attribute.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-01-08  
Modified Date
2016-01-11  
Seq
2016-1565  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
98142 17932 CVE-2016-1565 https://www.drupal.org/node/2644832  View
98143 17932 CVE-2016-1565 https://www.drupal.org/node/2645350  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
236 JVNDB-2016-001009 Drupal 用 Field Group モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用 Field Group モジュールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2016-1565 88071 CVE-2016-1565 17932 3.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001009.html 2016-01-05 2016-01-13 View