Cross-site scripting (XSS) vulnerability in the Feed Element Mapper module for Drupal allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via vectors related to options.
Vendor
feed element mapper project vulnerabilities
1 published CVE affecting feed element mapper project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 1
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 1
- Unscored
- 0
- CISA KEV
- 0
Products
Latest feed element mapper project CVEs
Newest publication first
-
LowCVSS 2.1 EPSS 0.73%
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.