Unrated severityNVD Advisory· Published Apr 21, 2015· Updated May 6, 2026
CVE-2015-3344
CVE-2015-3344
Description
Cross-site scripting (XSS) vulnerability in the Course module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a node title.
Affected products
28cpe:2.3:a:dlc_solutions:course:6.x-1.0-alpha1:*:*:*:*:drupal:*:*+ 27 more
- cpe:2.3:a:dlc_solutions:course:6.x-1.0-alpha1:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:6.x-1.0-rc10:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:6.x-1.0-rc1:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:6.x-1.0-rc2:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:6.x-1.0-rc3:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:6.x-1.0-rc4:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:6.x-1.0-rc5:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:6.x-1.0-rc6:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:6.x-1.0-rc7:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:6.x-1.0-rc8:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:6.x-1.0-rc9:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:6.x-1.1:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:6.x-1.x-dev:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:7.x-1.0-alpha1:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:7.x-1.0-alpha2:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:7.x-1.0-alpha3:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:7.x-1.0-beta1:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:7.x-1.0-beta2:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:7.x-1.0-beta3:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:7.x-1.0:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:7.x-1.0-rc1:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:7.x-1.0-rc2:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:7.x-1.0-rc3:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:7.x-1.0-rc4:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:7.x-1.1:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:7.x-1.2:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:7.x-1.3:*:*:*:*:drupal:*:*
- cpe:2.3:a:dlc_solutions:course:7.x-1.x-dev:*:*:*:*:drupal:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- www.drupal.org/node/2403305nvdPatch
- www.drupal.org/node/2403309nvdPatch
- www.drupal.org/node/2403333nvdPatchVendor Advisory
- www.openwall.com/lists/oss-security/2015/01/29/6nvd
- www.securityfocus.com/bid/72631nvd
News mentions
0No linked articles in our index yet.