CVE-2012-2340

The CVE-2012-2340 entry applies to the Drupal Contact Forms module (7.x-1.x) prior to 7.x-1.2. The vulnerability arises from permissions not being sufficiently restrictive, allowing remote authenticated users with the 'access the site-wide contact form' permission to modify the module settings vi...