CVE-2013-2715
Cross-site scripting (XSS) vulnerability in the admin view in the Search API (search_api) module...
Cross-site scripting (XSS) vulnerability in the admin view in the Search API (search_api) module 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a crafted field name.
Exploit likelihood
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in the admin view in the Search API (search_api) module 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a crafted field name.
- Record
CVE-2013-2715- CVSS 2.0
- 2.1 Low
AV:N/AC:H/Au:S/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Cross-site scripting (XSS) vulnerability in the admin view in the Search API (search_api) module 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a crafted field name.
- Record
CVE-2013-2715- Updated
- 2026-11-02
EUVDEUVD-2013-2654 No score
Cross-site scripting (XSS) vulnerability in the admin view in the Search API (search_api) module 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a crafted field name.
- Record
EUVD-2013-2654- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qjcf-x39h-78p8 No score
Cross-site scripting (XSS) vulnerability in the admin view in the Search API (search_api) module...
Cross-site scripting (XSS) vulnerability in the admin view in the Search API (search_api) module 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a crafted field name.
- Record
GHSA-qjcf-x39h-78p8- Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-2715 is a low vulnerability (CVSS 2.1) in Thomas Seidl Search Api, published March 27, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.06%, the 64th percentile. No source names a fixed version.
References
osvdb.org/89116
secunia.com/advisories/51806
openwall.com/lists/oss-security/2013/01/15/3
drupalcode.org/project/search_api.git/commitdiff/d22cf53
drupal.org/node/1884076
exchange.xforce.ibmcloud.com/vulnerabilities/81154
nvd.nist.gov/vuln/detail/CVE-2013-2715
github.com/advisories/GHSA-qjcf-x39h-78p8