Lucene search
+L

8 matches found

OSV
OSV
added 2026/07/08 5:13 p.m.5 views

DRUPAL-CONTRIB-2026-071

The Lingotek Ray Enterprise Translation module provides multilingual site management. The module fails to protect several state-changing administrative routes against Cross Site Request Forgery attacks. An attacker could trick a privileged user into visiting a crafted page that triggers actions...

4.3CVSS5.1AI score0.00118EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2012-1634

Malware in sbrugna...

3.5CVSS6.4AI score0.0107EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2025/09/05 1:44 p.m.7 views

CVE-2025-58785

Missing Authorization vulnerability in Jiro Sasamoto Ray Enterprise Translation lingotek-translation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ray Enterprise Translation: from n/a through = 1.7.2...

5.4CVSS5.8AI score0.00241EPSS
SaveExploits0References3
NVD
NVD
added 2012/10/06 9:55 p.m.18 views

CVE-2012-1624

Multiple cross-site scripting XSS vulnerabilities in the Lingotek module 6.x-1.x before 6.x-1.40 for Drupal allow remote authenticated users to inject arbitrary web script or HTML when 1 creating or 2 editing page content...

3.5CVSS5.5AI score0.0107EPSS
SaveExploits0References7
Prion
Prion
added 2012/10/06 9:55 p.m.15 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Lingotek module 6.x-1.x before 6.x-1.40 for Drupal allow remote authenticated users to inject arbitrary web script or HTML when 1 creating or 2 editing page content...

3.5CVSS5.7AI score0.0107EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2012/10/06 9:0 p.m.20 views

CVE-2012-1624

Multiple cross-site scripting XSS vulnerabilities in the Lingotek module 6.x-1.x before 6.x-1.40 for Drupal allow remote authenticated users to inject arbitrary web script or HTML when 1 creating or 2 editing page content...

5.5AI score0.0107EPSS
SaveExploits0References7
CVE
CVE
added 2012/10/06 9:0 p.m.42 views

CVE-2012-1624

The Drupal Lingotek module (6.x-1.x) is affected by XSS vulnerabilities in the content creation/editing workflow due to insufficient sanitization. Versions prior to Lingotek 6.x-1.40 allow remote authenticated users to inject arbitrary scripts/HTML when creating or editing node content. The issue...

3.5CVSS5.5AI score0.0107EPSS
SaveExploits0References7Affected Software1
Drupal
Drupal
added 2012/01/04 12:0 a.m.18 views

SA-CONTRIB-2012-002 - Lingotek - Cross Site Scripting

CVE: CVE-2012-1624 This module enables you to translate a website's content using tools provided by the Lingotek Collaborative Translation Network. The module doesn't sufficiently sanitize user input when creating or editing page content. This allows a malicious content editor to potentially inpu...

3.5CVSS5.8AI score0.0107EPSS
SaveExploits0References10
Rows per page
Query Builder