CVE-2015-5507

Published: Aug 18, 2015Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Inline Entity Form module 7.x-1.x before 7.x-1.6 for Drupal allows remote authenticated users with permission to create or edit fields to inject arbitrary web script or HTML via unspecified vectors.

Affected (6)

Products: Inline Entity Form Project: Inline Entity Form

Inline Entity Form Project

1 product

Inline Entity Form

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Inline Entity Form Project Inline Entity Form	Version 7.x-1.0
Inline Entity Form Project Inline Entity Form	Version 7.x-1.1
Inline Entity Form Project Inline Entity Form	Version 7.x-1.2
Inline Entity Form Project Inline Entity Form	Version 7.x-1.3
Inline Entity Form Project Inline Entity Form	Version 7.x-1.4
Inline Entity Form Project Inline Entity Form	Version 7.x-1.5