CVE Database
/

CVE-2012-1624

Back to search

CVE-2012-1624

Published: Oct 6, 2012

Modified: Aug 6, 2024

PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Lingotek module 6.x-1.x before 6.x-1.40 for Drupal allow remote authenticated users to inject arbitrary web script or HTML when (1) creating or (2) editing page content.

VendorProductVersions

n/a

n/a

affected
n/a

References

lingotek-createedit-xss(72151)
vdb-entry
x_refsource_XF
47453
third-party-advisory
x_refsource_SECUNIA
51272
vdb-entry
x_refsource_BID
78185
vdb-entry
x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now