drupal7-block_class: cross-site scripting
| Package(s): | drupal7-block_class | CVE #(s): | CVE-2016-3144 | ||||||||
| Created: | April 22, 2016 | Updated: | April 27, 2016 | ||||||||
| Description: | From the CVE entry: Cross-site scripting (XSS) vulnerability in the Block Class module 7.x-2.x before 7.x-2.2 for Drupal allows remote authenticated users with the "Administer block classes" permission to inject arbitrary web script or HTML via a class name. | ||||||||||
| Alerts: |
| ||||||||||