CVE-2015-4373

Severity: low (CVSS 3.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-06-15 · updated 2026-06-17
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in the OG tabs module before 7.x-1.1 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to nodes posted in an Organic Groups group.

Affected products

Og Tabs Project Og Tabs: through 7.x-1.0

References

http://www.openwall.com/lists/oss-security/2015/04/25/6
http://www.securityfocus.com/bid/73054
https://www.drupal.org/node/2404115
https://www.drupal.org/node/2450427
http://www.openwall.com/lists/oss-security/2015/04/25/6
http://www.securityfocus.com/bid/73054
https://www.drupal.org/node/2404115
https://www.drupal.org/node/2450427

Get alerted when CVE-2015-4373 or the next vulnerability affects your stack