CVE-2015-5500: Cross-site scripting (XSS) vulnerability in the Navigate module for Drupal allows remote authenticated user...

Security readout for executives and security teams

CVE-2015-5500 is an authenticated cross-site scripting issue in the Navigate module for Drupal. A user with certain permissions could inject script or HTML through unspecified vectors. The public bundle does not identify affected versions, a CVSS score, or confirmed exploitation. Exposure is likely limited to Drupal sites that installed the Navigate module and granted the relevant permissions to authenticated users. The provided sources do not list affected module versions or default permission names. Treat this as a targeted application hygiene issue, not an emergency based on the provided evidence. Prioritize sites with broad authenticated user access or administrative users likely to view Navigate module content. Mitigation focus: Check Drupal advisory guidance for affected versions and fixed releases.; Update the Navigate module if a fixed release is available.; Disable or remove the Navigate module if it is unused..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.