Multiple cross-site scripting (XSS) vulnerabilities in the OM Maximenu module 6.x-1.x before 6.x-1.44 and 7.x-1.x before 7.x-1.44 for Drupal allow remote authenticated users with the "administer OM Maximenu" permission to inject arbitrary web script or HTML via the (1) Menu Title (2) Link Title, (3) Path Query, (4) Anchor, or (5) vocabulary names.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2012-12-03T21:00:00Z

Updated: 2024-09-16T23:16:50.316Z

Reserved: 2012-10-24T00:00:00Z

Link: CVE-2012-5553

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2012-12-03T21:55:02.643

Modified: 2012-12-04T05:00:00.000

Link: CVE-2012-5553

cve-icon Redhat

No data.