Cross-site scripting (XSS) vulnerability in the Feed Element Mapper module for Drupal allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via vectors related to options.
Product
feed element mapper project feed element mapper vulnerabilities
1 published CVE affecting feed element mapper project feed element mapper, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 1
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 1
- Unscored
- 0
- CISA KEV
- 0
Latest feed element mapper project feed element mapper CVEs
Newest publication first
-
LowCVSS 2.1 EPSS 0.73%
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.