| Max CVSS | 4.0 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2015-5500 | 3.5 |
Cross-site scripting (XSS) vulnerability in the Navigate module for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors.
|
20-08-2015 - 02:30 | 18-08-2015 - 18:00 | |
| CVE-2015-5499 | 4.0 |
The Navigate module for Drupal does not properly check permissions, which allows remote authenticated users to modify custom widgets and create widget database records by leveraging the "navigate view" permission.
|
20-08-2015 - 02:30 | 18-08-2015 - 17:59 |