← Back

Ezra Barnett Gildesgame

ezra_barnett_gildesgame

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Smartqueue Og
smartqueue_og
Og Subgroups
og_subgroups

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Ezra Barnett Gildesgame
1Og Subgroups
Apr 23, 2026
Nov 24, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the Subgroups for Organic Groups (OG) module 5.x before 5.x-4.0 and 5.x before 5.x-3.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified...Show more
Cross-site scripting (XSS) vulnerability in the Subgroups for Organic Groups (OG) module 5.x before 5.x-4.0 and 5.x before 5.x-3.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified node titles.Show less
1Ezra Barnett Gildesgame
1Smartqueue Og
Apr 23, 2026
Nov 9, 2009
N/A· v4
N/A· v3
4.0 MEDIUM· v2
The Smartqueue_og module 5.x before 5.x-1.3 and 6.x before 6.x-1.0-rc3, a module for Drupal, does not verify group-node privileges in certain circumstances involving subqueue creation, which allows remote authenticated u...Show more
The Smartqueue_og module 5.x before 5.x-1.3 and 6.x before 6.x-1.0-rc3, a module for Drupal, does not verify group-node privileges in certain circumstances involving subqueue creation, which allows remote authenticated users to discover arbitrary organic group names by reading confirmation messages.Show less