CVE-2012-5569

2022-10-0316:15:30

redhat

www.cve.org

cve-2012-5569

cross-site scripting

drupal

webmail module

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.0%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allow remote attackers to inject arbitrary web script or HTML via a (1) page title or (2) crafted email message.

References

drupal.org/node/1808852

www.openwall.com/lists/oss-security/2012/11/20/4

www.openwall.com/lists/oss-security/2012/11/27/2

drupal.org/node/1808616