Security Advisory
CVE-2016-1565
6.1
MEDIUM
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the Field Group module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with permission to configure field display settings to inject arbitrary web script or HTML via an element attribute.
Published Date
January 8, 2016
Official Source
NIST NVD Advisory