CVE-2014-8319

Published: Oct 17, 2014Modified: May 6, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the easy_social_admin_summary function in the Easy Social module 7.x-2.x before 7.x-2.11 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a block title.

Affected (11)

Products: Easy Social Project: Easy Social

Easy Social Project

1 product

Easy Social

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Easy Social Project Easy Social	Version 7.x-2.0
Easy Social Project Easy Social	Version 7.x-2.10
Easy Social Project Easy Social	Version 7.x-2.1
Easy Social Project Easy Social	Version 7.x-2.2
Easy Social Project Easy Social	Version 7.x-2.3
Easy Social Project Easy Social	Version 7.x-2.4
Easy Social Project Easy Social	Version 7.x-2.5
Easy Social Project Easy Social	Version 7.x-2.6
Easy Social Project Easy Social	Version 7.x-2.7
Easy Social Project Easy Social	Version 7.x-2.8
Easy Social Project Easy Social	Version 7.x-2.9