Vulnerabilities > Petition Project
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2015-06-15 | CVE-2015-4377 | Cross-site Scripting vulnerability in Petition Project Petition 6.X1.0/6.X1.1/6.X1.2 Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Petition module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users with the "create petition" permission to inject arbitrary web script or HTML via unknown vectors. | 2.1 |