CVE-2012-2717

The CVE-2012-2717 issue affects Drupal via the Mobile Tools module (6.x-2.x) prior to 6.x-2.3. It enables cross-site scripting (XSS) by unsafely displaying user-supplied values in the General configuration page (Mobile URL field, Desktop URL field) or the Mobile Tools block message options. The r...

SA-CONTRIB-2012-088 - Mobile Tools - Cross Site Scripting (XSS)

Mobile Tools provides Drupal developers with some tools to assist in making a site mobile. The module contains several persistent cross site scripting XSS vulnerabilities due to the fact that it fails to sanitize user supplied values before display. CVE: CVE-2012-2717 Versions affected Mobile Too...