Cross-site scripting (XSS) vulnerability in the Ajax handler in Drupal 7.x before 7.39 and the Ctools module 6.x-1.x before 6.x-1.14 for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors involving a whitelisted HTML element, possibly related to the "a" tag.
2015-08-24T14:59:22.680
2025-04-12T10:46:40.837
Deferred
CVSSv2: 4.3 (MEDIUM)
AV:N/AC:M/Au:N/C:N/I:P/A:N
8.6
2.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Operating System | fedoraproject | fedora | 21 | Yes |
| Operating System | fedoraproject | fedora | 22 | Yes |
| Operating System | fedoraproject | fedora | 23 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.0 | Yes |
| Application | drupal | drupal | 7.1 | Yes |
| Application | drupal | drupal | 7.2 | Yes |
| Application | drupal | drupal | 7.3 | Yes |
| Application | drupal | drupal | 7.4 | Yes |
| Application | drupal | drupal | 7.5 | Yes |
| Application | drupal | drupal | 7.6 | Yes |
| Application | drupal | drupal | 7.7 | Yes |
| Application | drupal | drupal | 7.8 | Yes |
| Application | drupal | drupal | 7.9 | Yes |
| Application | drupal | drupal | 7.10 | Yes |
| Application | drupal | drupal | 7.11 | Yes |
| Application | drupal | drupal | 7.12 | Yes |
| Application | drupal | drupal | 7.13 | Yes |
| Application | drupal | drupal | 7.14 | Yes |
| Application | drupal | drupal | 7.15 | Yes |
| Application | drupal | drupal | 7.16 | Yes |
| Application | drupal | drupal | 7.17 | Yes |
| Application | drupal | drupal | 7.18 | Yes |
| Application | drupal | drupal | 7.19 | Yes |
| Application | drupal | drupal | 7.20 | Yes |
| Application | drupal | drupal | 7.21 | Yes |
| Application | drupal | drupal | 7.22 | Yes |
| Application | drupal | drupal | 7.23 | Yes |
| Application | drupal | drupal | 7.24 | Yes |
| Application | drupal | drupal | 7.25 | Yes |
| Application | drupal | drupal | 7.26 | Yes |
| Application | drupal | drupal | 7.27 | Yes |
| Application | drupal | drupal | 7.28 | Yes |
| Application | drupal | drupal | 7.29 | Yes |
| Application | drupal | drupal | 7.30 | Yes |
| Application | drupal | drupal | 7.33 | Yes |
| Application | drupal | drupal | 7.34 | Yes |
| Application | drupal | drupal | 7.35 | Yes |
| Application | drupal | drupal | 7.36 | Yes |
| Application | drupal | drupal | 7.37 | Yes |
| Application | drupal | drupal | 7.38 | Yes |
| Application | drupal | drupal | 7.x-dev | Yes |
| Application | chaos_tool_suite_project | ctools | 6.x-1.0 | Yes |
| Application | chaos_tool_suite_project | ctools | 6.x-1.0 | Yes |
| Application | chaos_tool_suite_project | ctools | 6.x-1.0 | Yes |
| Application | chaos_tool_suite_project | ctools | 6.x-1.0 | Yes |
| Application | chaos_tool_suite_project | ctools | 6.x-1.0 | Yes |
| Application | chaos_tool_suite_project | ctools | 6.x-1.0 | Yes |
| Application | chaos_tool_suite_project | ctools | 6.x-1.0 | Yes |
| Application | chaos_tool_suite_project | ctools | 6.x-1.0 | Yes |
| Application | chaos_tool_suite_project | ctools | 6.x-1.0 | Yes |
| Application | chaos_tool_suite_project | ctools | 6.x-1.1 | Yes |
| Application | chaos_tool_suite_project | ctools | 6.x-1.2 | Yes |
| Application | chaos_tool_suite_project | ctools | 6.x-1.3 | Yes |
| Application | chaos_tool_suite_project | ctools | 6.x-1.4 | Yes |
| Application | chaos_tool_suite_project | ctools | 6.x-1.5 | Yes |
| Application | chaos_tool_suite_project | ctools | 6.x-1.6 | Yes |
| Application | chaos_tool_suite_project | ctools | 6.x-1.7 | Yes |
| Application | chaos_tool_suite_project | ctools | 6.x-1.8 | Yes |
| Application | chaos_tool_suite_project | ctools | 6.x-1.9 | Yes |
| Application | chaos_tool_suite_project | ctools | 6.x-1.11 | Yes |
| Application | chaos_tool_suite_project | ctools | 6.x-1.12 | Yes |
| Application | chaos_tool_suite_project | ctools | 6.x-1.13 | Yes |
| Application | chaos_tool_suite_project | ctools | 6.x-1.x | Yes |