Description
Cross-site scripting (XSS) vulnerability in the nodeauthor module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a Profile2 field in a provided block.
Unscored
CVE-2015-3365
EUVD-2015-3410GHSA-c4fm-c9x2-fj8g
Cross-site scripting (XSS) vulnerability in the nodeauthor module for Drupal allows remote authenticated users to inject arbitrary web scri…
Published Apr 21, 2015 · Updated Aug 6, 2024 · Assigned by mitre