Unscored CVE-2012-2310 EUVD-2012-2303GHSA-j4xq-mx46-94xj

Cross-site scripting (XSS) vulnerability in the cctags module for Drupal 6.x-1.x before 6.x-1.10 and 7.x-1.x before 7.x-1.10 allows remote …

Published Jul 25, 2012 · Updated Sep 16, 2024 · Assigned by redhat

Description

Cross-site scripting (XSS) vulnerability in the cctags module for Drupal 6.x-1.x before 6.x-1.10 and 7.x-1.x before 7.x-1.10 allows remote authenticated users with certain roles to inject arbitrary web script or HTML via unspecified vectors.

References

http://drupal.org/node/1508098
[oss-security] 20120502 Re: CVE Request for Drupal contributed modules mailing-list
http://drupal.org/node/1508100
49018 third-party-advisory
[oss-security] 20120502 CVE Request for Drupal contributed modules mailing-list
http://drupal.org/node/1558248