PT-2019-6753 · Drupal · Activity Module

Kurt Seifried

·

CVE-2012-2078

·

Publicado

2019-11-21

·

Atualizado

2019-12-11

CVSS v2.0

3.5

Baixa

VetorAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Drupal Activity module versions 6.x-1.x
Description A cross-site scripting (XSS) issue exists in the Activity module for Drupal, which could potentially allow attackers to inject malicious scripts into websites.
Recommendations For versions 6.x-1.x, update the Activity module to a version that includes a fix for this issue.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2012-2078

Produtos afetados

Activity Module