Filtered by vendor Navigate Project Subscriptions
Filtered by product Navigate Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2015-5499 1 Navigate Project 1 Navigate 2025-04-12 N/A
The Navigate module for Drupal does not properly check permissions, which allows remote authenticated users to modify custom widgets and create widget database records by leveraging the "navigate view" permission.
CVE-2015-5500 1 Navigate Project 1 Navigate 2025-04-12 N/A
Cross-site scripting (XSS) vulnerability in the Navigate module for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors.