6 matches found
CVE-2012-2309
Cross-site scripting XSS vulnerability in the Glossify Internal Links Auto SEO module for Drupal 6.x-2.5 and earlier allows remote authenticated users with certain roles to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-2309
Cross-site scripting XSS vulnerability in the Glossify Internal Links Auto SEO module for Drupal 6.x-2.5 and earlier allows remote authenticated users with certain roles to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the Glossify Internal Links Auto SEO module for Drupal 6.x-2.5 and earlier allows remote authenticated users with certain roles to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-2309
Summary of CVE-2012-2309 (Drupal Glossify module) : The vulnerability is a cross-site scripting (XSS) flaw in the Glossify Internal Links Auto SEO contributed module for Drupal 6.x-2.5 and earlier. It allows remote authenticated users with certain roles to inject arbitrary web script or HTML via ...
CVE-2012-2309
Cross-site scripting XSS vulnerability in the Glossify Internal Links Auto SEO module for Drupal 6.x-2.5 and earlier allows remote authenticated users with certain roles to inject arbitrary web script or HTML via unspecified vectors...
SA-CONTRIB-2012-071 - Glossify - Cross Site Scripting (XSS) - Unsupported
CVE: CVE-2012-2309 This module generates internal node to node, node to taxonomy or node to external URL links crosslinks automatically - ideal for SEO of your site's pages and partner pages. This module does not protect against an Cross Site Scripting XSS attack. The vulnerability is mitigated b...