Cross-site scripting (XSS) vulnerability in the password_policy_admin_view function in password_policy.admin.inc in the Password Policy module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.5 for. Rated low severity (CVSS 2.1), this vulnerability is remotely exploitable. Public exploit code available.
XSS
Password Policy
NVD
CVSS 2.0
2.1
EPSS
0.2%
Cross-site scripting (XSS) vulnerability in the Hatch theme 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users with the "Administer content," "Create new article," or "Edit any. Rated low severity (CVSS 2.1), this vulnerability is remotely exploitable.
XSS
Hatch
NVD
CVSS 2.0
2.1
EPSS
0.2%