PT-2012-3785

Name of the Vulnerable Software and Affected Versions Drupal Contact Forms module versions 6.x-1.x before 6.x-1.13 Description A cross-site scripting XSS issue exists in the Contact Forms module for Drupal, allowing remote authenticated users with the administer site-wide contact form permission ...

CVE-2012-2340

The CVE-2012-2340 entry applies to the Drupal Contact Forms module (7.x-1.x) prior to 7.x-1.2. The vulnerability arises from permissions not being sufficiently restrictive, allowing remote authenticated users with the 'access the site-wide contact form' permission to modify the module settings vi...

PT-2012-3962

Name of the Vulnerable Software and Affected Versions Contact Forms module versions 7.x-1.x before 7.x-1.2 Description The issue allows remote authenticated users with the access the site-wide contact form permission to modify the module settings. This is due to insufficiently restrictive...