https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 14:10:51 +0000 https://vulnerability.circl.lu/vuln/cnvd-2018-21851 cnvd-2018-21851 https://vulnerability.circl.lu/vuln/cnvd-2018-21851 https://vulnerability.circl.lu/vuln/fkie_cve-2018-7603 <p>In Drupal&#39;s 3rd party module search auto complete prior to versions 7.x-4.8 there is a Cross Site Scripting vulnerability. This Search Autocomplete module enables you to autocomplete textfield using data from your website (nodes, comments, etc.). The module doesn&#39;t sufficiently filter user-entered text among the autocompletion items leading to a Cross Site Scripting (XSS) vulnerability. This vulnerability can be exploited by any user allowed to create one of the autocompletion item, for instance, nodes, users, comments.</p> <p>In Drupal&#39;s 3rd party module search auto complete prior to versions 7.x-4.8 there is a Cross Site Scripting vulnerability. This Search Autocomplete module enables you to autocomplete textfield using data from your website (nodes, comments, etc.). The module doesn&#39;t sufficiently filter user-entered text among the autocompletion items leading to a Cross Site Scripting (XSS) vulnerability. This vulnerability can be exploited by any user allowed to create one of the autocompletion item, for instance, nodes, users, comments.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2018-7603 https://vulnerability.circl.lu/vuln/ghsa-jhjp-3hp8-fjch <p>In Drupal&#39;s 3rd party module search auto complete prior to versions 7.x-4.8 there is a Cross Site Scripting vulnerability. This Search Autocomplete module enables you to autocomplete textfield using data from your website (nodes, comments, etc.). The module doesn&#39;t sufficiently filter user-entered text among the autocompletion items leading to a Cross Site Scripting (XSS) vulnerability. This vulnerability can be exploited by any user allowed to create one of the autocompletion item, for instance, nodes, users, comments.</p> <p>In Drupal&#39;s 3rd party module search auto complete prior to versions 7.x-4.8 there is a Cross Site Scripting vulnerability. This Search Autocomplete module enables you to autocomplete textfield using data from your website (nodes, comments, etc.). The module doesn&#39;t sufficiently filter user-entered text among the autocompletion items leading to a Cross Site Scripting (XSS) vulnerability. This vulnerability can be exploited by any user allowed to create one of the autocompletion item, for instance, nodes, users, comments.</p> https://vulnerability.circl.lu/vuln/ghsa-jhjp-3hp8-fjch https://vulnerability.circl.lu/vuln/gsd-2018-7603 gsd-2018-7603 https://vulnerability.circl.lu/vuln/gsd-2018-7603