6 matches found
CVE-2025-62087
Technical details for CVE-2025-62087 are not provided in the supplied documents. No product, impact, or remediation specifics are available here. Monitor for official advisories from the vendor/authorities for updates.
Cross site scripting
Cross-site scripting XSS vulnerability in the stickynote module before 7.x-1.1 for Drupal allows remote authenticated users with edit stickynotes privileges to inject arbitrary web script or HTML via unspecified vecotrs...
CVE-2012-1636
Cross-site request forgery CSRF vulnerability in the stickynote module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of users for requests that delete stickynotes via unspecified vectors...
CVE-2012-1636
The CVE-2012-1636 entry concerns the Drupal stickynote module (7.x-1.x) with a CSRF vulnerability that allows remote attackers to hijack user authentication for requests that delete stickynotes. Affected versions are prior to 7.x-1.1. The issue’s exploitation is described as CSRF without explicit...
CVE-2012-1636: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the stickynote module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of users for requests that delete stickynotes via unspecified vectors...
CVE-2012-5233: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the stickynote module before 7.x-1.1 for Drupal allows remote authenticated users with edit stickynotes privileges to inject arbitrary web script or HTML via unspecified vecotrs...