CVE-2014-9153
01.12.2014, 16:59
Cross-site scripting (XSS) vulnerability in the Services module 7.x-3.x before 7.x-3.10 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via the callback parameter in a JSONP response.
| Vendor | Product | Version |
|---|---|---|
| services_project | services | 7.x-3.9:x |
𝑥
= Vulnerable software versions