Security Advisory

CVE-2012-5558

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-01-09 20:35:02
Last updated 2024-08-06 21:14:15
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the Smiley module 6.x-1.x versions prior to 6.x-1.1 and Smileys module 6.x-1.x versions prior to 6.x-1.1 for Drupal allows remote authenticated users with the "administer smiley" permission to inject arbitrary web script or HTML via a smiley acronym.