| Package | Affected versions | Patched versions |
|---|---|---|
| hierarchical select | = 6.x-3.0= 6.x-3.1= 6.x-3.2= 6.x-3.3= 6.x-3.4= 6.x-3.5= 6.x-3.6= 6.x-3.7= 6.x-3.x | |
| hierarchical select | = 6.x-3.0= 6.x-3.1= 6.x-3.x |
Cross-site scripting (XSS) vulnerability in the Hierarchical Select module 6.x-3.x before 6.x-3.8 for Drupal allows remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML via unspecified vectors related to "the vocabulary's help text."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free