CVE-2015-1568: Studio.gd Gd Infinite Scroll

Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in the GD Infinite Scroll module before 7.x-1.4 for Drupal allows remote attackers to hijack the authentication of users with the "edit gd infinite scroll settings" permission for requests that delete settings via unspecified vectors.

Affected products

• Studio.gd Gd Infinite Scroll: up to and including 7.x-1.3

Published 2015-02-09. Last modified 2026-06-17.