Skip to content
OpenAdvisories
Unscored CVE-2012-2717 EUVD-2012-2697GHSA-q8pp-g2w7-5hpc

Multiple cross-site scripting (XSS) vulnerabilities in the Mobile Tools module 6.x-2.x before 6.x-2.3 for Drupal allow remote attackers to …

Published Jun 27, 2012 · Updated Aug 6, 2024 · Assigned by redhat

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Mobile Tools module 6.x-2.x before 6.x-2.3 for Drupal allow remote attackers to inject arbitrary web script or HTML via the (1) Mobile URL field or (2) Desktop URL field to the General configuration page, or the (3) message to the Mobile Tools block message options.

References