Unscored severity · published Oct 8, 2014
CVE-2014-7978
Cross-site scripting (XSS) vulnerability in the BlueMasters theme 7.x-2.x before 7.x-2.1 for Drupal allows remote authenticated users with the "administer themes" permission to…
–
CVSS
0.9%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the BlueMasters theme 7.x-2.x before 7.x-2.1 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via vectors related to theme settings.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BL
Bluemasters · Drupal
7.x-2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-7978
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-7978
secunia.com
http://secunia.com/advisories/57829
www.securityfocus.com
http://www.securityfocus.com/bid/66782
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/92537
Patch
https://www.drupal.org/node/2236251
Vendor Advisory
https://www.drupal.org/node/2236797