Security Advisory

CVE-2015-5488

2.1

Vulnerability Description

Cross-site scripting (XSS) vulnerability in the MailChimp Signup submodule in the MailChimp module 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "administer mailchimp" permission to inject arbitrary web script or HTML via unspecified vectors.
Published Date August 18, 2015
Official Source NIST NVD Advisory