CVE-2012-2711

Multiple cross-site scripting (XSS) vulnerabilities in the Taxonomy List module 6.x-1.x before 6.x-1.4 for Drupal allow remote authenticated users with create or edit taxonomy terms permissions to inject arbitrary web script or HTML via vectors related to taxonomy information.

Score

CVSS 2.0 2.1 Low

Status

Modified - secalert@redhat.com

Published

2012-06-27

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Taxonomy List (Nancy Wichmann)

References

• http://drupal.org/node/1595396
• http://drupal.org/node/1597262
• http://drupalcode.org/project/taxonomy_list.git/commitdiff/7dd21a0
• http://secunia.com/advisories/49238
• http://www.openwall.com/lists/oss-security/2012/06/14/3
• http://www.osvdb.org/82164
• http://www.securityfocus.com/bid/53671
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75867