CVE-2014-7980 | BDVDB-2026-64749 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in template.php in Zen theme 7.x-3.x before 7.x-3.3 and 7.x-5.x before 7.x-5.5 for Drupal allow remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via the skip_link_text setting and unspecified other theme settings.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.drupal.org/node/2254837
http://www.securityfocus.com/bid/67175
http://secunia.com/advisories/58318
http://drupal.org/node/2254925
https://www.drupal.org/node/2254835

Exploit#

No public exploit known

History#

Version 12014-10-08Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.