CVE-2015-6754

Published: Aug 31, 2015Modified: May 6, 2026

2.1

Vector

AV:N/AC:H/Au:S/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the administration interface in the Path Breadcrumbs module 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "Administer Path Breadcrumbs" permission to inject arbitrary web script or HTML via unspecified vectors.

Affected (3)

Products: Path Breadcrumbs Project: Path Breadcrumbs

Path Breadcrumbs Project

1 product

Path Breadcrumbs

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Path Breadcrumbs Project Path Breadcrumbs	Version 7.x-3.0
Path Breadcrumbs Project Path Breadcrumbs	Version 7.x-3.1
Path Breadcrumbs Project Path Breadcrumbs	Version 7.x-3.2