← Back

Navigate

navigate

Vendor: Navigate Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-5500
1Navigate Project
1Navigate
May 6, 2026
Aug 18, 2015
N/A· v4
N/A· v3
3.5 LOW· v2
Cross-site scripting (XSS) vulnerability in the Navigate module for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors.
CVE-2015-5499
1Navigate Project
1Navigate
May 6, 2026
Aug 18, 2015
N/A· v4
N/A· v3
4.0 MEDIUM· v2
The Navigate module for Drupal does not properly check permissions, which allows remote authenticated users to modify custom widgets and create widget database records by leveraging the "navigate view" permission.