Impliedbydesign
1 CVEs
vendor
Monthly
Cross-site scripting (XSS) vulnerability in the Navigate bar in the Navigate module before 6.x-1.1 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.
XSS
Navigate
Impliedbydesign
NVD
CVSS 2.0
4.3
EPSS
0.5%
EPSS 0%
CVSS 4.3
MEDIUM
PATCH
This Month
Cross-site scripting (XSS) vulnerability in the Navigate bar in the Navigate module before 6.x-1.1 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.
XSS
Navigate
Impliedbydesign
NVD