Drupaldise Cms Updater — known CVE vulnerabilities

Every CVE whose affected-product data names Drupaldise Cms Updater, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2015-7306 — CVSS 4.9 (medium): The CMS Updater module 7.x-1.x before 7.x-1.3 for Drupal does not properly check access permissions, which allows remote authenticated…
• CVE-2015-7307 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in the CMS Updater module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to inject…