CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 2.1. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2015-5488
Severity
LOW
CVSS
2.1
EPSS
1.41%
Original NVD Description
Cross-site scripting (XSS) vulnerability in the MailChimp Signup submodule in the MailChimp module 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "administer mailchimp" permission to inject arbitrary web script or HTML via unspecified vectors.