CVE-2012-1653

CVE-2012-1653

EPSS 1.1%

Cross-site scripting (XSS) vulnerability in the Taxonomy Views Integrator (TVI) module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to "views pages."

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://drupal.org/node/1306946 http://drupal.org/node/1461892 http://osvdb.org/79682 http://secunia.com/advisories/48163 https://exchange.xforce.ibmcloud.com/vulnerabilities/73612 http://www.openwall.com/lists/oss-security/2012/04/07/1 http://www.securityfocus.com/bid/52227