Vulnerabilities > Thinkshout > Mailchimp > 7.x.3.0
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2015-08-18 | CVE-2015-5488 | Cross-site Scripting vulnerability in Thinkshout Mailchimp 7.X3.0/7.X3.1/7.X3.2 Cross-site scripting (XSS) vulnerability in the MailChimp Signup submodule in the MailChimp module 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "administer mailchimp" permission to inject arbitrary web script or HTML via unspecified vectors. | 2.1 |