Unscored CVE-2012-5569 EUVD-2012-5460GHSA-9m8p-564h-5p6w

Multiple cross-site scripting (XSS) vulnerabilities in the Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allow remote attackers to…

Published Dec 3, 2012 · Updated Sep 16, 2024 · Assigned by redhat

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allow remote attackers to inject arbitrary web script or HTML via a (1) page title or (2) crafted email message.

References

http://drupal.org/node/1808852
[oss-security] 20121126 Re: CVE Request for Drupal Contributed Modules mailing-list
[oss-security] 20121120 Re: CVE Request for Drupal Contributed Modules mailing-list
https://drupal.org/node/1808616