CVE-2014-9740

Published: Jul 6, 2015Modified: May 6, 2026

2.1

Vector

AV:N/AC:H/Au:S/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Rules Link module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer rules links" permission to inject arbitrary web script or HTML via unspecified vectors, which are not properly handled in the (1) question and (2) description strings in a confirmation form for a triggering Rules link.

Affected (6)

Products: Rules Link Project: Rules Link

Rules Link Project

1 product

Rules Link

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Rules Link Project Rules Link	Version 7.x-1.0
Rules Link Project Rules Link	Version 7.x-1.0 beta1
Rules Link Project Rules Link	Version 7.x-1.0 beta2
Rules Link Project Rules Link	Version 7.x-1.0 beta3
Rules Link Project Rules Link	Version 7.x-1.0 beta4
Rules Link Project Rules Link	Version 7.x-1.0 beta5