Cross-site scripting (XSS) vulnerability in the Smiley module 6.x-1.x versions prior to 6.x-1.1 and Smileys module 6.x-1.x versions prior to 6.x-1.1 for Drupal allows remote authenticated users with the "administer smiley" permission to inject arbitrary web script or HTML via a smiley acronym.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2020-01-09T20:35:02
Updated: 2024-08-06T21:14:15.762Z
Reserved: 2012-10-24T00:00:00
Link: CVE-2012-5558
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-01-09T21:15:11.387
Modified: 2024-11-21T01:44:53.013
Link: CVE-2012-5558
Redhat
No data.