Search Autocomplete Project

search_autocomplete_project

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Search Autocomplete

search_autocomplete

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-7603 1Search Autocomplete Project 1Search Autocomplete Jun 17, 2026 Jan 15, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 In Drupal's 3rd party module search auto complete prior to versions 7.x-4.8 there is a Cross Site Scripting vulnerability. This Search Autocomplete module enables you to autocomplete textfield using data from your websit...Show more In Drupal's 3rd party module search auto complete prior to versions 7.x-4.8 there is a Cross Site Scripting vulnerability. This Search Autocomplete module enables you to autocomplete textfield using data from your website (nodes, comments, etc.). The module doesn't sufficiently filter user-entered text among the autocompletion items leading to a Cross Site Scripting (XSS) vulnerability. This vulnerability can be exploited by any user allowed to create one of the autocompletion item, for instance, nodes, users, comments.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2018-7603

1Search Autocomplete Project

1Search Autocomplete

Jun 17, 2026

Jan 15, 2019

N/A· v4

6.1 MEDIUM· v3

4.3 MEDIUM· v2

In Drupal's 3rd party module search auto complete prior to versions 7.x-4.8 there is a Cross Site Scripting vulnerability. This Search Autocomplete module enables you to autocomplete textfield using data from your website (nodes, comments, etc.). The module doesn't sufficiently filter user-entered text among the autocompletion items leading to a Cross Site Scripting (XSS) vulnerability. This vulnerability can be exploited by any user allowed to create one of the autocompletion item, for instance, nodes, users, comments.Show less