EUVD-2012-2303

Malware in sbrugna...

CVE-2012-2310

Cross-site scripting XSS vulnerability in the cctags module for Drupal 6.x-1.x before 6.x-1.10 and 7.x-1.x before 7.x-1.10 allows remote authenticated users with certain roles to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2310

Cross-site scripting XSS vulnerability in the cctags module for Drupal 6.x-1.x before 6.x-1.10 and 7.x-1.x before 7.x-1.10 allows remote authenticated users with certain roles to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the cctags module for Drupal 6.x-1.x before 6.x-1.10 and 7.x-1.x before 7.x-1.10 allows remote authenticated users with certain roles to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2310

Cross-site scripting XSS vulnerability in the cctags module for Drupal 6.x-1.x before 6.x-1.10 and 7.x-1.x before 7.x-1.10 allows remote authenticated users with certain roles to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2310

CVE-2012-2310 affects the Drupal cctags contributed module. The vulnerability is a Cross-site scripting (XSS) flaw in cctags 6.x-1.x before 6.x-1.10 and 7.x-1.x before 7.x-1.10, caused by insufficient filtering of user-supplied text, enabling remote authenticated users with certain roles to injec...

CVE-2012-2310: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the cctags module for Drupal 6.x-1.x before 6.x-1.10 and 7.x-1.x before 7.x-1.10 allows remote authenticated users with certain roles to inject arbitrary web script or HTML via unspecified vectors...

PT-2012-3943

Name of the Vulnerable Software and Affected Versions Drupal cctags module versions 6.x-1.x before 6.x-1.10 Drupal cctags module versions 7.x-1.x before 7.x-1.10 Description A cross-site scripting XSS issue exists, allowing remote authenticated users with certain roles to inject arbitrary web...

SA-CONTRIB-2012-072 - cctags - Cross Site Scripting (XSS)

CVE: CVE-2012-2310 This module enables you to create "tag clouds" with taxonomy terms displayed in different sizes depending on how frequently they are used on a site. The module doesn't sufficiently filter user supplied text leading to a Cross Site Scripting XSS vulnerability. This vulnerability...