Security Advisory

CVE-2012-2083

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2012-08-31 22:00:00
Last updated 2024-09-17 03:19:12
Assigner redhat
State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the fusion_core_preprocess_page function in fusion_core/template.php in the Fusion module before 6.x-1.13 for Drupal allows remote attackers to inject arbitrary web script or HTML via the q parameter.