CVE-2015-2088: Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Term Queue module befor...

Security readout for executives and security teams

CVE-2015-2088 is an XSS issue in Drupal's Term Queue module before 6.x-1.1. A remote attacker could inject script or HTML into unspecified administration pages. For affected Drupal 6 sites, risk centers on administrator browser compromise, but the public record lacks CVSS, vectors, and exploitation evidence. Exposure appears limited to Drupal installations using the contributed Term Queue module before version 6.x-1.1, especially where administrative pages are reachable by users or workflows that can carry attacker-controlled content. Treat this as a targeted remediation item for legacy Drupal environments, not a broad emergency. Prioritize if any internet-facing or sensitive Drupal site still runs the affected Term Queue version. Mitigation focus: Inventory Drupal sites for the Term Queue module and installed version.; Upgrade Term Queue to 6.x-1.1 or later where applicable.; Review Drupal advisory pages for any module-specific remediation notes..

Prepared

Jun 14, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.