CVE-2012-2154

CVE-2012-2154 corresponds to a cross-site scripting (XSS) vulnerability in the CDN2 Video module 6.x for Drupal. The vulnerability arises from the module not sanitizing output, allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. According to the DRUPAL-SA-CON...

SA-CONTRIB-2012-050 - CDN2 Video - Unsupported

CDN2 is a plug and play module and video management service for Drupal. The module does not sanitize output correctly, allowing for a cross-site scripting XSS vulnerability. Additionally, the Form API is not correctly utilized allowing for cross-site request forgery CSRF attempts. This module...