Description
Cross-site scripting (XSS) vulnerability in the Term Merge module before 7.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Unscored
CVE-2015-3360
EUVD-2015-3405GHSA-ggc2-8hg2-rgmc
Cross-site scripting (XSS) vulnerability in the Term Merge module before 7.x-1.2 for Drupal allows remote authenticated users to inject arb…
Published Apr 21, 2015 · Updated Aug 6, 2024 · Assigned by mitre