Skip to content
OpenAdvisories
Unscored CVE-2014-8379 EUVD-2014-8216GHSA-875q-9x56-gmh7

Multiple cross-site scripting (XSS) vulnerabilities in the Marketo MA module before 7.x-1.5 for Drupal allow remote authenticated users wit…

Published Oct 21, 2014 · Updated Sep 17, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Marketo MA module before 7.x-1.5 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to field titles to the (1) Webform or (2) User sub-modules.

References