← Back

Search Api Autocomplete Project

search_api_autocomplete_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Search Api Autocomplete
search_api_autocomplete
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-6752
1Search Api Autocomplete Project
1Search Api Autocomplete
May 6, 2026
Aug 31, 2015
N/A· v4
N/A· v3
2.1 LOW· v2
Cross-site scripting (XSS) vulnerability in the Search API Autocomplete module 7.x-1.x before 7.x-1.3 for Drupal, when the search index is configured to use the HTML filter processor, allows remote authenticated users wi...Show more
Cross-site scripting (XSS) vulnerability in the Search API Autocomplete module 7.x-1.x before 7.x-1.3 for Drupal, when the search index is configured to use the HTML filter processor, allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors, which are not properly handled in the returned suggestions.Show less