Drupal : Security Vulnerabilities, CVEs, Published In 2012 (XSS)
Cross-site scripting (XSS) vulnerability in the Glossary module 6.x-1.x before 6.x-1.8 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "taxonomy information."
Max CVSS
4.3
EPSS Score
0.45%
Published
2012-05-21
Updated
2017-08-29
Multiple cross-site scripting (XSS) vulnerabilities in the RealName module 6.x-1.x before 6.x-1.5 for Drupal allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) "user names in page titles" and (2) "autocomplete callbacks."
Max CVSS
4.3
EPSS Score
0.49%
Published
2012-08-14
Updated
2017-08-29
Multiple cross-site scripting (XSS) vulnerabilities in the FAQ module 6.x-1.x before 6.x-1.13 and 7.x-1.x-rc1 for Drupal allow remote authenticated users to inject arbitrary web script or HTML via the (1) title parameter in faq.admin.inc or (2) detailed_question parameter in faq.module.
Max CVSS
4.3
EPSS Score
0.34%
Published
2012-09-25
Updated
2017-08-29
3 vulnerabilities found