CVE-2015-4356

Name of the Vulnerable Software and Affected Versions Drupal Webform module versions 7.x-4.x before 7.x-4.4

Description A cross-site scripting (XSS) issue exists in the view-based webform results table of the Webform module for Drupal, allowing remote authenticated users with specific permissions to inject arbitrary web script or HTML via a webform.

Recommendations For versions prior to 7.x-4.4, update to version 7.x-4.4 or later to resolve the issue.