webform project webform vulnerabilities and exploits

(subscribe to this query)

3.5

CVSSv2

Cross-site scripting (XSS) vulnerability in the Webform module 6.x-3.x prior to 6.x-3.20, 7.x-3.x prior to 7.x-3.20, and 7.x-4.x prior to 7.x-4.0-beta2 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a field label t...

3.5

CVSSv2

Cross-site scripting (XSS) vulnerability in the Webform module prior to 6.x-3.22, 7.x-3.x prior to 7.x-3.22, and 7.x-4.x prior to 7.x-4.4 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a node title, which is used a...

3.5

CVSSv2

Cross-site scripting (XSS) vulnerability in the Webform module prior to 6.x-3.23, 7.x-3.x prior to 7.x-3.23, and 7.x-4.x prior to 7.x-4.5 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a component name in the recip...

3.5

CVSSv2

Cross-site scripting (XSS) vulnerability in the view-based webform results table in the Webform module 7.x-4.x prior to 7.x-4.4 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a webform.

Webform Project Webform 7.x-4.0 Webform Project Webform 7.x-4.1 Webform Project Webform 7.x-4.2 Webform Project Webform 7.x-4.3

3.5

CVSSv2

Cross-site scripting (XSS) vulnerability in the Webform Validation module 6.x-1.x prior to 6.x-1.6 and 7.x-1.x prior to 7.x-1.4 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a component name text.

Webform Validation Project Webform Validation 6.x-1.1 Webform Validation Project Webform Validation 6.x-1.2 Webform Validation Project Webform Validation 7.x-1.3 Webform Validation Project Webform Validation 6.x-1.0 Webform Validation Project Webform Validation 7.x-1.1 Webform Validation Project Webform Validation 7.x-1.2 Webform Validation Project Webform Validation 6.x-1.5 Webform Validation Project Webform Validation 7.x-1.0 Webform Validation Project Webform Validation 6.x-1.3 Webform Validation Project Webform Validation 6.x-1.4

3.5

CVSSv2

Cross-site scripting (XSS) vulnerability in the Webform Invitation module 7.x-1.x prior to 7.x-1.3 and 7.x-2.x prior to 7.x-2.4 for Drupal allows remote authenticated users with the Webform: Create new content, Webform: Edit own content, or Webform: Edit any content permission to...

Webform Invitation Project Webform Invitation 7.x-2.1 Webform Invitation Project Webform Invitation 7.x-2.2 Webform Invitation Project Webform Invitation 7.x-2.3 Webform Invitation Project Webform Invitation 7.x-1.0 Webform Invitation Project Webform Invitation 7.x-1.2 Webform Invitation Project Webform Invitation 7.x-1.1 Webform Invitation Project Webform Invitation 7.x-2.0

4.3

CVSSv2

The Payment for Webform module 7.x-1.x prior to 7.x-1.5 for Drupal does not restrict access by anonymous users, which allows remote anonymous users to use the payment of other anonymous users when submitting a form that requires payment.

Payment For Webform Project Payment For Webform 7.x-1.5 Payment For Webform Project Payment For Webform 7.x-1.2 Payment For Webform Project Payment For Webform 7.x-1.4 Payment For Webform Project Payment For Webform 7.x-1.0 Payment For Webform Project Payment For Webform 7.x-1.1 Payment For Webform Project Payment For Webform 7.x-1.3

3.5

CVSSv2

Cross-site scripting (XSS) vulnerability in the Ubercart Webform Integration module prior to 6.x-1.8 and 7.x prior to 7.x-2.4 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors.

Ubercart Webform Integration Project Ubercart Webform Integration 7.x-1.0 Ubercart Webform Integration Project Ubercart Webform Integration 6.x-1.0 Ubercart Webform Integration Project Ubercart Webform Integration 7.x-2.0

6.8

CVSSv2

Cross-site request forgery (CSRF) vulnerability in the Webform Multiple File Upload module 6.x-1.x prior to 6.x-1.3 and 7.x-1.x prior to 7.x-1.3 for Drupal allows remote malicious users to hijack the authentication of certain users for requests that delete files via unspecified v...

Webform Multiple File Upload Project Webform Multiple File Upload 6.x-1.1 Webform Multiple File Upload Project Webform Multiple File Upload 6.x-1.2 Webform Multiple File Upload Project Webform Multiple File Upload 7.x-1.x Webform Multiple File Upload Project Webform Multiple File Upload 7.x-1.2 Webform Multiple File Upload Project Webform Multiple File Upload 6.x-1.0

3.5

CVSSv2

Cross-site scripting (XSS) vulnerability in the Webform prepopulate block module prior to 7.x-3.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Webform Prepopulate Block Project Webform Prepopulate Block

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook