Vulnerabilities > Display Suite Project
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2015-06-15 | CVE-2015-4392 | Cross-site Scripting vulnerability in Display Suite Project Display Suite 7X2.7 Cross-site scripting (XSS) vulnerability in the Display Suite module 7.x-2.7 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to field display settings. | 3.5 |
2013-03-27 | CVE-2013-0323 | Cross-Site Scripting vulnerability in Display Suite Project DS Cross-site scripting (XSS) vulnerability in the Display Suite module 7.x-1.x before 7.x-1.7 and 7.x-2.x before 7.x-2.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via the author field. | 4.3 |