CVE-2014-8376

no score yetEPSS 0.9%

Cross-site scripting (XSS) vulnerability in the context administration sub-panel in the Site Banner module before 7.x-4.1 for Drupal allows remote authenticated users with the "Administer contexts" Context UI module permission to inject arbitrary web script or HTML via vectors related to context settings.

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2014-10-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

site_banner_project:site_banner

References

http://secunia.com/advisories/60758
http://www.securityfocus.com/bid/69343
https://www.drupal.org/node/2324303
https://www.drupal.org/node/2324689
http://secunia.com/advisories/60758

Check your stack JSON