Description
The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom code that triggers a rebuild of the user profile form.
Remediation
References
Related Vulnerabilities
WordPress Plugin Total Security Multiple Vulnerabilities (3.4)
MySQL CVE-2012-3173 Vulnerability (CVE-2012-3173)
Perl Numeric Errors Vulnerability (CVE-2013-7422)
WordPress Plugin Facebook Page Photo Gallery Cross-Site Scripting (2.0.9)
WordPress Plugin WP-Members Membership Cross-Site Scripting (3.4.9.2)