CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 2.1. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2014-4303
Severity
LOW
CVSS
2.1
EPSS
1.26%
Original NVD Description
Multiple cross-site scripting (XSS) vulnerabilities in the Touch theme 7.x-1.x before 7.x-1.9 for Drupal allow remote authenticated users with the Administer themes permission to inject arbitrary web script or HTML via vectors related to the (1) Twitter and (2) Facebook username settings.