The Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the "administer hotblocks" permission to cause a denial of service (infinite loop and time out) via a. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. Public exploit code available.
Denial Of Service
Hotblocks
NVD
CVSS 2.0
3.5
EPSS
0.6%
Cross-site scripting (XSS) vulnerability in the settings page (admin/settings/hotblocks) in the Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the. Rated low severity (CVSS 2.1), this vulnerability is remotely exploitable. Public exploit code available.
XSS
Hotblocks
NVD
CVSS 2.0
2.1
EPSS
0.2%