RSS   Vulnerabilities for 'Mailchimp'   RSS

2015-08-18
 
CVE-2015-5488

 

 
Cross-site scripting (XSS) vulnerability in the MailChimp Signup submodule in the MailChimp module 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "administer mailchimp" permission to inject arbitrary web script or HTML via unspecified vectors.

 
2012-12-03
 
CVE-2012-5551

 

 
Multiple cross-site scripting (XSS) vulnerabilities in the MailChimp module 7.x-2.x before 7.x-2.7 for Drupal allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) a predictable "webhook URL key" and (2) improper sanitization of "Webhook variables from POST requests."

 

 >>> Vendor: Thinkshout 2 Products
Mandrill
Mailchimp


Copyright 2024, cxsecurity.com

 

Back to Top