CVE-2012-5553

2022-10-0316:15:30

redhat

www.cve.org

cross-site scripting

drupal

remote authenticated users

administer permission

arbitrary web script

html

menu title

link title

path query

anchor

vocabulary names

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.5%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the OM Maximenu module 6.x-1.x before 6.x-1.44 and 7.x-1.x before 7.x-1.44 for Drupal allow remote authenticated users with the “administer OM Maximenu” permission to inject arbitrary web script or HTML via the (1) Menu Title (2) Link Title, (3) Path Query, (4) Anchor, or (5) vocabulary names.