CVE-2015-4365: Taxonomy Accordion Project Taxonomy Accordion

Low severity, CVSS 3.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the Taxonomy Accordion module for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to taxonomy terms.

Affected products

• Taxonomy Accordion Project Taxonomy Accordion: any version

Published 2015-06-15. Last modified 2026-06-17.