Nathan Haug : Security Vulnerabilities, CVEs, Published In 2012
Cross-site scripting (XSS) vulnerability in the FileField Sources module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.6 for Drupal, when the field has "Reference existing" source enabled, allows remote authenticated users to inject arbitrary web script or HTML via the filename of an uploaded file.
Max CVSS
2.1
EPSS Score
0.08%
Published
2012-12-03
Updated
2012-12-04
Multiple cross-site scripting (XSS) vulnerabilities in components/select.inc in the Webform module 6.x-3.x before 6.x-3.17 and 7.x-3.x before 7.x-3.17 for Drupal, when the "Select (or other)" module is enabled, allow remote authenticated users with the create webform content permission to inject arbitrary web script or HTML via vectors related to (1) checkboxes or (2) radios.
Max CVSS
2.1
EPSS Score
0.12%
Published
2012-09-18
Updated
2017-08-29
2 vulnerabilities found