← Back

Video Project

video_project

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Video
video
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-3362
1Video Project
1Video
May 6, 2026
Apr 21, 2015
N/A· v4
N/A· v3
3.5 LOW· v2
Cross-site scripting (XSS) vulnerability in the Video module before 7.x-2.11 for Drupal, when using the video WYSIWYG plugin, allows remote authenticated users to inject arbitrary web script or HTML via a node title.
CVE-2013-0224
1Video Project
1Video
Apr 29, 2026
Mar 19, 2013
N/A· v4
N/A· v3
4.4 MEDIUM· v2
The Video module 7.x-2.x before 7.x-2.9 for Drupal, when using the FFmpeg transcoder, allows local users to execute arbitrary PHP code by modifying a temporary PHP file.