CVE-2018-14937

CVE-2018-14937 describes a cross-site scripting (XSS) vulnerability in my little forum 2.4.12, exploitable via the Menu Link field on the Add page. Multiple connected sources corroborate that the issue is an XSS in the Add page option of my little forum 2.4.12. The root cause, as stated across so...

CVE-2018-14937

The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field...

CVE-2018-14937

The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field...

PT-2018-12812 · My Little Forum · My Little Forum

Name of the Vulnerable Software and Affected Versions: my little forum version 2.4.12 Description: The issue allows for XSS via the Menu Link field in the Add page option. Recommendations: For my little forum version 2.4.12, consider restricting access to the Add page option until a fix is...

CVE-2018-14937: Improper Neutralization of Input During Web Page Generation

The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field...

CVE-2013-0324

Cross-site scripting XSS vulnerability in the Rendered links formatter in the Menu Reference module 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with the "Administer menus and menu items" permission to inject arbitrary web script or HTML via the menu link title...

PT-2013-2236

Name of the Vulnerable Software and Affected Versions Menu Reference module versions 7.x-1.x before 7.x-1.0 Description A cross-site scripting XSS issue exists in the Rendered links formatter of the Menu Reference module, allowing remote authenticated users with the "Administer menus and menu...

CVE-2013-0324: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Rendered links formatter in the Menu Reference module 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with the "Administer menus and menu items" permission to inject arbitrary web script or HTML via the menu link title...