Cross-site scripting (XSS) vulnerability in the Bank Account Listing Page in the Commerce Balanced Payments module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Vendor
commerce balanced payments project vulnerabilities
1 published CVE affecting commerce balanced payments project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 1
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 1
- Unscored
- 0
- CISA KEV
- 0
Products
Latest commerce balanced payments project CVEs
Newest publication first
-
LowCVSS 3.5 EPSS 0.94%
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.