CVE-2012-5233

CVE-2012-5233

EPSS 1.5%

Cross-site scripting (XSS) vulnerability in the stickynote module before 7.x-1.1 for Drupal allows remote authenticated users with edit stickynotes privileges to inject arbitrary web script or HTML via unspecified vecotrs.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://drupalcode.org/project/stickynote.git/commit/7413dd1 http://drupal.org/node/1408556 http://drupal.org/node/1409422 http://secunia.com/advisories/47650 http://www.openwall.com/lists/oss-security/2012/04/07/1 http://www.securityfocus.com/bid/51558