CVE-2012-5558
N/A
N/A
Summary
Cross-site scripting (XSS) vulnerability in the Smiley module 6.x-1.x versions prior to 6.x-1.1 and Smileys module 6.x-1.x versions prior to 6.x-1.1 for Drupal allows remote authenticated users with the "administer smiley" permission to inject arbitrary web script or HTML via a smiley acronym.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Smiley;Smileys | Smiley | 6.x-1.x versions prior to 6.x-1.1 | affected |
| Smiley;Smileys | Smileys | 6.x-1.x versions prior to 6.x-1.1 | affected |
Weaknesses
- Cross-Site Scripting
ADP Enrichment
CVE Program Container
Additional References
- http://drupal.org/node/1840892
- http://www.openwall.com/lists/oss-security/2012/11/20/4
- http://drupal.org/node/1840954
- http://drupal.org/node/1840956
References
- http://drupal.org/node/1840892
- http://www.openwall.com/lists/oss-security/2012/11/20/4
- http://drupal.org/node/1840954
- http://drupal.org/node/1840956
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.