CVE-2015-1567: Studio.gd Gd Infinite Scroll

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the admin page in the GD Infinite Scroll module before 7.x-1.4 for Drupal allows remote authenticated users with the "edit gd infinite scroll settings" permission to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Studio.gd Gd Infinite Scroll: up to and including 7.x-1.3

Published 2015-02-09. Last modified 2026-06-17.