Description
Cross-site scripting (XSS) vulnerability in the Node Invite module before 6.x-2.5 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a node title.
Unscored
CVE-2015-3372
EUVD-2015-3417GHSA-45gq-7r9r-374v
Cross-site scripting (XSS) vulnerability in the Node Invite module before 6.x-2.5 for Drupal allows remote authenticated users to inject ar…
Published Apr 21, 2015 · Updated Aug 6, 2024 · Assigned by mitre