Unrated severityNVD Advisory· Published Apr 21, 2015· Updated Jun 17, 2026

CVE-2015-3389

Description

Cross-site scripting (XSS) vulnerability in the Download counts report page in the Public Download Count module (pubdlcnt) 7.x-1.x-dev and earlier for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Backdrop Contrib/Pubdlcntinferred
Range: <=7.x-1.x-dev
Public Download Count Project/Public Download Count
cpe:2.3:a:public_download_count_project:public_download_count:*:*:*:*:*:drupal:*:*
Range: <=7.x-1.x-dev
Drupal/Public Download Countllm-create
Range: <=7.x-1.x-dev

Patches

Vulnerability mechanics

References

www.drupal.org/node/2420119nvdPatchVendor Advisory
www.openwall.com/lists/oss-security/2015/02/05/16nvd
www.securityfocus.com/bid/74271nvd
exchange.xforce.ibmcloud.com/vulnerabilities/100653nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000