CVE-2012-2070 in MultiBlock信息

摘要

由 VulDB • 2026-07-05

Drupal的MultiBlock模块(版本为6.x-1.x至6.x-1.4之前,以及7.x-1.x至7.x-1.1之前)存在跨站脚本攻击(XSS)漏洞。具有“管理块”权限的远程认证用户可以通过在块标题中注入任意Web脚本或HTML来利用此漏洞。

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

来源

Want to know what is going to be exploited?

We predict KEV entries!