Unscored severity · published Jun 15, 2015
CVE-2015-4347
Cross-site scripting (XSS) vulnerability in the inLinks Integration module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified path arguments
–
CVSS
1.1%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the inLinks Integration module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified path arguments.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IN
Inlinks · Inlinks Project
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-4347
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-4347
www.openwall.com
http://www.openwall.com/lists/oss-security/2015/04/25/6
www.securityfocus.com
http://www.securityfocus.com/bid/72802
Vendor Advisory
https://www.drupal.org/node/2437969
More from Inlinks
8.8
CVE-2017-16955
SQL injection vulnerability in the InLinks plugin through 1.1 for WordPress allows authenticated users to execute arbitrary SQL commands via the "keyword" parameter to…