Vulnerability Description
Cross-site scripting (XSS) vulnerability in the context administration sub-panel in the Site Banner module before 7.x-4.1 for Drupal allows remote authenticated users with the "Administer contexts" Context UI module permission to inject arbitrary web script or HTML via vectors related to context settings.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Site Banner Project | Site Banner | <= 7.x-4.0 |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/60758
- http://www.securityfocus.com/bid/69343
- https://www.drupal.org/node/2324303Patch
- https://www.drupal.org/node/2324689Vendor Advisory
- http://secunia.com/advisories/60758
- http://www.securityfocus.com/bid/69343
- https://www.drupal.org/node/2324303Patch
- https://www.drupal.org/node/2324689Vendor Advisory
FAQ
What is CVE-2014-8376?
CVE-2014-8376 is a vulnerability with a CVSS score of 3.5 (LOW). Cross-site scripting (XSS) vulnerability in the context administration sub-panel in the Site Banner module before 7.x-4.1 for Drupal allows remote authenticated users with the "Administer contexts" Co...
How severe is CVE-2014-8376?
CVE-2014-8376 has been rated LOW with a CVSS base score of 3.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-8376?
Check the references section above for vendor advisories and patch information. Affected products include: Site Banner Project Site Banner.