CVE-2012-4468 in Privatemsg
Résumé (Anglaise)
Cross-site scripting (XSS) vulnerability in the Privatemsg module 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via a user name in a private message.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Réserver
21/08/2012
Divulgation
30/11/2012
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 63091 | Privatemsg cross site scripting | 79 | Non défini | Correctif officiel | CVE-2012-4468 |