Country
Monthly
Cross-site scripting in the Drupal Country contributed module lets an attacker with high privileges on a Drupal site place script into pages that a victim then views after being induced to interact with the crafted content. The CVE description covers Country 0.0.0 through 2.1.3 and 2.2.0 through 2.2.1; the independent assessment rates the issue low severity (CVSS 3.1) and not an urgent priority because exploitation requires high privileges, user interaction and high attack complexity. No public exploit or active exploitation is identified in the supplied data (SSVC exploitation: none; EPSS 0.16%), and a vendor patch is available.
Cross-site scripting in the Drupal Country contributed module lets an attacker with high privileges on a Drupal site place script into pages that a victim then views after being induced to interact with the crafted content. The CVE description covers Country 0.0.0 through 2.1.3 and 2.2.0 through 2.2.1; the independent assessment rates the issue low severity (CVSS 3.1) and not an urgent priority because exploitation requires high privileges, user interaction and high attack complexity. No public exploit or active exploitation is identified in the supplied data (SSVC exploitation: none; EPSS 0.16%), and a vendor patch is available.