CVSS: 3.5EPSS: 0%CPEs: 16EXPL: 0CVE-2014-8076
https://notcve.org/view.php?id=CVE-2014-8076
Cross-site scripting (XSS) vulnerability in the Professional theme 7.x before 7.x-2.04 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via vectors related to custom copyright information. Vulnerabilidad de XSS en el tema para Drupal Professional 7.x anterior a 7.x-2.04 permite a usuarios remotos autenticados con el permiso 'administrar temas' inyectar secuencias de comandos web o HTML arbitrarios a través de vectores relacionados con la información de copyright personalizado. • http://drupal.org/node/2248145 http://secunia.com/advisories/58233 https://exchange.xforce.ibmcloud.com/vulnerabilities/92755 https://www.drupal.org/node/2248095 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 2.1EPSS: 0%CPEs: 6EXPL: 0CVE-2013-1781
https://notcve.org/view.php?id=CVE-2013-1781
Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Professional theme before 7.x-1.4 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la "galería de 3 diapositivas" en el tema Professional anterior a v7.x-1.4 para Drupal permite a usuarios remotos autenticados con permisos para administrar temas inyectar secuencias de comandos web o HTML a través de vectores no especificados. • http://drupal.org/node/1730768 http://drupal.org/node/1929486 http://drupalcode.org/project/professional_theme.git/commitdiff/0640ddc http://drupalcode.org/project/professional_theme.git/commitdiff/e3fa6a2 http://www.openwall.com/lists/oss-security/2013/02/28/3 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •