CVE-2015-3361: Linkit Project Linkit

Low severity, CVSS 2.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the Linkit module before 7.x-2.7 and 7.x-3.x before 7.x-3.3 for Drupal, when the node search plugin is enabled, allows remote authenticated users to inject arbitrary web script or HTML via a node title.

Affected products

• Linkit Project Linkit: from 7.x-1.0, before 7.x-2.7 (fixed in 7.x-2.7); from 7.x-3.0, before 7.x-3.3 (fixed in 7.x-3.3)

Published 2015-04-21. Last modified 2026-06-17.