Description

Cross-site scripting (XSS) vulnerability in the Glossary module 6.x-1.x before 6.x-1.8 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "taxonomy information."

Remediation

References

CVE-2012-2339

Related Vulnerabilities

Oracle Application Server Other Vulnerability (CVE-2009-0217)

WordPress Plugin JS MultiHotel Multiple Vulnerabilities (2.2.1)

WordPress Plugin YITH WooCommerce Subscription Security Bypass (1.3.4)

Moodle Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2016-9186)

WordPress Plugin Form Vibes-Database Manager for Forms SQL Injection (1.4.5)

Severity

Medium

Classification

CVE-2012-2339 CWE-707

Tags

Missing Update Known Vulnerabilities