CVE-2012-5553

CVE-2012-5553 relates to multiple XSS vulnerabilities in the Drupal OM Maximenu module. Affected software: OM Maximenu 6.x-1.x before 6.x-1.44 and 7.x-1.x before 7.x-1.44. The issue arises when authenticated users with the "administer OM Maximenu" permission can inject arbitrary web script or HTM...

CVE-2012-6065

The CVE-2012-6065 vulnerability affects the Drupal OM Maximenu module (6.x-1.43 and earlier). When the “Title has PHP” option is enabled, remote authenticated users with the "Administer OM Maximenu" permission can trigger execution of arbitrary PHP code via a Link Title. This is a distinct issue ...