CVE-2012-2723

Cross-site scripting XSS vulnerability in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with maestro admin permissions to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2723

CVE-2012-2723 affects the Drupal Maestro module (7.x-1.x) prior to 7.x-1.2. The root cause is insufficient filtering/validation of user-supplied data in the module’s admin screens, enabling XSS. The vulnerability requires a user with maestro admin permissions and allows remote authenticated users...

SA-CONTRIB-2012-094 - Maestro module - Cross Site Request Forgery (CSRF), Cross Site Scripting (XSS)

The Maestro module is a workflow engine/solution that facilitates simple and complex business process automation. The module doesn't sufficiently filter user-supplied data in its admin screens leading to a Cross Site Scripting XSS vulnerability. A Cross Site Request Forgery vulnerability in the...