Drupal Shindig-Integrator vulnerabilities

3 CVEs affecting Drupal Shindig-Integrator, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-4598, published 2008-10-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-4597, published 2008-10-17. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Shindig-Integrator 5.x, a module for Drupal, does not properly restrict generated page access, which allows remote attackers to gain privileges via unspecified vectors.
CVE-2008-4598, published 2008-10-17. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Unspecified vulnerability in Shindig-Integrator 5.x, a module for Drupal, has unspecified impact and remote attack vectors related to "numerous flaws" that are not related to XSS or access control, a…
CVE-2008-4596, published 2008-10-17. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Shindig-Integrator 5.x, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors in generated…