CVE-2012-4484

The CVE-2012-4484 entry concerns a cross-site scripting (XSS) vulnerability in the Drupal Campaign Monitor module’s administrative interface, affecting the module before version 6.x-2.5. The root cause is an XSS flaw that could allow remote attackers to inject arbitrary web script or HTML via uns...