Vulnerabilities > Impliedbydesign > Navigate > 7.x.1.0

DATE CVE VULNERABILITY TITLE RISK
2015-02-27 CVE-2015-2101 Cross-site Scripting vulnerability in Impliedbydesign Navigate 6.X1.0/7.X1.0
Cross-site scripting (XSS) vulnerability in the Navigate bar in the Navigate module before 6.x-1.1 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
4.3