CVE-2015-4365: Cross-site scripting (XSS) vulnerability in the Taxonomy Accordion module for Drupal allows remote authenti...

Security readout for executives and security teams

This CVE describes a cross-site scripting issue in Drupal's Taxonomy Accordion contributed module. An authenticated user with specific taxonomy-related permissions could place script or HTML into taxonomy terms, creating risk for administrators or visitors who later view affected content. Exposure is likely limited to Drupal sites that installed the Taxonomy Accordion contributed module and allow non-administrative authenticated users to create or edit relevant taxonomy terms. Treat as a targeted cleanup item for Drupal environments, especially where content editors or other authenticated users can manage taxonomy terms. It is not supported as actively exploited by the provided evidence. Mitigation focus: Check the Drupal advisory for the supported fixed release or official workaround.; Update or disable the Taxonomy Accordion module according to vendor guidance.; Restrict taxonomy term management permissions to trusted administrators..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.