WI
Product
Wishlist
2
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Wishlist to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-3357 | – | Apr 21 | Cross-site scripting (XSS) vulnerability in the Wishlist module before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal allows remote authenticated users with the "access wishlists"… Affected: through 6.x-2.6; 7.x-2.5; 7.x-2.6; 7.x-2.x-dev |
| CVE-2015-3354 | – | Apr 21 | Cross-site request forgery (CSRF) vulnerability in the Wishlist module before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal allows remote attackers to hijack the authentication of… Affected: through 6.x-2.6; 7.x-2.5; 7.x-2.6; 7.x-2.x-dev |
Showing 2