CVE-2012-2075 in Contact Save
Zusammenfassung (Englisch)
Cross-site scripting (XSS) vulnerability in the Contact Save module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users with the access site-wide contact form permission to inject arbitrary web script or HTML via unspecified vectors.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservieren
04.04.2012
Veröffentlichung
14.08.2012
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 61640 | Steindom Contact Save Contact Form Cross Site Scripting | 79 | High | Offizieller Fix | CVE-2012-2075 |