Beveiligingsadvies

CVE-2012-5553

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2012-12-03 21:00:00
Laatst bijgewerkt 2024-09-16 23:16:50
Toegewezen door redhat
CVSS-score geen score
Status PUBLISHED

Beschrijving

Multiple cross-site scripting (XSS) vulnerabilities in the OM Maximenu module 6.x-1.x before 6.x-1.44 and 7.x-1.x before 7.x-1.44 for Drupal allow remote authenticated users with the "administer OM Maximenu" permission to inject arbitrary web script or HTML via the (1) Menu Title (2) Link Title, (3) Path Query, (4) Anchor, or (5) vocabulary names.