CVE-2015-5487: XSS
Cross-site scripting (XSS) vulnerability in the Camtasia Relay module 6.x-2.x before 6.x-3.2 and 7.x-2.x before 7.x-1.3 for Drupal allows remote authenticated users with the "view meta information" permission to inject arbitrary web script or HTML via unspecified vectors related to the meta access tab.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5487?
CVE-2015-5487 is categorized as a medium severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
How do I fix CVE-2015-5487?
To remediate CVE-2015-5487, upgrade to Camtasia Relay versions 6.x-3.2 or 7.x-1.3 or later.
Who is affected by CVE-2015-5487?
CVE-2015-5487 affects users of the Camtasia Relay module for Drupal versions 6.x-2.x prior to 6.x-3.2 and 7.x-2.x prior to 7.x-1.3.
What type of vulnerability is CVE-2015-5487?
CVE-2015-5487 is a cross-site scripting (XSS) vulnerability that allows remote authenticated users to inject web scripts or HTML.
What are the potential consequences of CVE-2015-5487?
Exploitation of CVE-2015-5487 can lead to unauthorized script execution in the context of a user's session, compromising user data.