CVE-2015-3389

BASSO 3.5CVE-2015-3389 · Published 21/04/2015 · updated 17/06/2026

In breve

CVE-2015-3389 è una vulnerabilità BASSO (CVSS 3.5) che riguarda public download count (public download count project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.95%, superiore al 61.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
public download count public_download_count_project	`≤ 7.x-1.x-dev`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in the Download counts report page in the Public Download Count module (pubdlcnt) 7.x-1.x-dev and earlier for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

References

openwall.com/lists/oss-security/2015/02/05/16
securityfocus.com/bid/74271
exchange.xforce.ibmcloud.com/vulnerabilities/100653
drupal.org/node/2420119 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free