CVE-2012-5559

2012-12-03T16:55:02
ID CVE-2012-5559
Type cve
Reporter NVD
Modified 2015-06-19T10:20:04

Description

Cross-site scripting (XSS) vulnerability in the page manager node view task in the Chaos tool suite (ctools) module 6.x-1.x before 6.x-1.10 for Drupal allows remote authenticated users with permissions to submit or edit nodes to inject arbitrary web script or HTML via the page title.