Unscored CVE-2012-5233 EUVD-2012-5156GHSA-f5r2-9xf3-m4j7

Cross-site scripting (XSS) vulnerability in the stickynote module before 7.x-1.1 for Drupal allows remote authenticated users with edit sti…

Published Oct 1, 2012 · Updated Sep 16, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the stickynote module before 7.x-1.1 for Drupal allows remote authenticated users with edit stickynotes privileges to inject arbitrary web script or HTML via unspecified vecotrs.

References

47650 third-party-advisory
http://drupal.org/node/1408556
http://drupal.org/node/1409422
http://drupalcode.org/project/stickynote.git/commit/7413dd1
[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments) mailing-list
51558 vdb-entry