CVE-2012-5591

CVE-2012-5591 is an XSS vulnerability in the Drupal Zero Point contributed module. The issue occurs in zeropoint 6.x-1.x before 6.x-1.18 and 7.x-1.x before 7.x-1.4, where path aliases are not properly escaped, allowing remote attackers to inject arbitrary JavaScript/HTML via crafted URLs. Impact ...

CVE-2012-5591

Cross-site scripting XSS vulnerability in the Zero Point module 6.x-1.x before 6.x-1.18 and 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via the path aliases...

SA-CONTRIB-2012-172 - Zero Point - Cross Site Scripting (XSS)

Zero Point is an advanced theme which includes many options, ideal for a wide range of sites. The theme does not escape path aliases exposing a Cross site scripting XSS vulnerability in URLs. There are no mitigating factors. CVE: CVE-2012-5591 Versions affected zeropoint 6.x-1.x versions prior to...