4 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in the administration forms in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with administer sharethis permissions to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-2076
Cross-site scripting XSS vulnerability in the administration forms in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with administer sharethis permissions to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-2076: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the administration forms in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with administer sharethis permissions to inject arbitrary web script or HTML via unspecified vectors...
PT-2012-3790
Name of the Vulnerable Software and Affected Versions Drupal ShareThis module versions 7.x-2.x before 7.x-2.3 Description A cross-site scripting XSS issue exists in the administration forms of the ShareThis module, allowing remote authenticated users with administer ShareThis permissions to injec...