Description

Cross-site scripting (XSS) vulnerability in the Glossary module 6.x-1.x before 6.x-1.8 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "taxonomy information."

Remediation

References

CVE-2012-2339

Related Vulnerabilities

WordPress Plugin Custom Post Type UI Cross-Site Request Forgery (1.7.3)

WordPress Plugin WP-Members Membership Unspecified Vulnerability (3.1.9.2)

PHP Other Vulnerability (CVE-2005-0596)

PHP-Fusion Improper Privilege Management Vulnerability (CVE-2020-24949)

IBMHttpServer Other Vulnerability (CVE-2001-0122)

Severity

Medium

Classification

CVE-2012-2339 CWE-707

Tags

Missing Update Known Vulnerabilities