Cross-site scripting (XSS) vulnerability in the Invoice module 6.x-1.x prior to 6.x-1.2 and 7.x-1.x prior to 7.x-1.3 for Drupal allows remote authenticated users with the "Administer own invoices" permission to inject arbitrary web script or HTML via unspecified vectors involving nodes of the "Invoice" content type.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
invoice project invoice 6.x-1.1 |
||
invoice project invoice 7.x-1.x-dev |
Vulmon