Cross-site scripting (XSS) vulnerability in the administration interface in the Path Breadcrumbs module 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "Administer Path Breadcrumbs" permission to inject arbitrary web script or HTML via unspecified vec...
Vendor
path breadcrumbs project vulnerabilities
2 published CVES affecting path breadcrumbs project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 2
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 1
- Unscored
- 0
- CISA KEV
- 0
Products
Latest path breadcrumbs project CVEs
Newest publication first
-
LowCVSS 2.1 EPSS 0.74%
-
MediumCVSS 5.0 EPSS 1.4%
The Path Breadcrumbs module before 7.x-3.2 for Drupal allows remote attackers to bypass intended access restrictions and obtain sensitive node titles by reading a 403 Not Found page.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.