CVE-2012-1637CWE-79cross-site-scripting

CVE-2012-1637

Medium · published November 22, 2019

CVSS v3.1

4.8

EPSS

Percentile

43.6

In the wild

Unconfirmed

What it is

Cross-site scripting vulnerability (XSS) in the Quick Tabs module 6.x-2.x before 6.x-2.1, 6.x-3.x before 6.x-3.1, and 7.x-3.x before 7.x-3.3 for Drupal.

The record

Technical detail

CVSS v3.1: 4.8 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0: Not supplied
EPSS: 0.00528 · 43.6th percentile
Weakness: CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: 2019-11-22T04:15Z

Affected products (5)

Product	Versions	Fixed in
quick_tabs_project/quick_tabs	all versions	—
quick_tabs_project/quick_tabs	all versions	—
quick_tabs_project/quick_tabs	all versions	—
quick_tabs_project/quick_tabs	all versions	—
quick_tabs_project/quick_tabs	all versions	—

References (4)

http://www.openwall.com/lists/oss-security/2012/04/07/1 · [email protected]https://www.drupal.org/node/1409476 · [email protected]http://www.openwall.com/lists/oss-security/2012/04/07/1 · af854a3a-2127-422b-91ae-364da2661108 https://www.drupal.org/node/1409476 · af854a3a-2127-422b-91ae-364da2661108

EPSS history

Timeline

21 NOV 22:52Z
Cross-site scripting vulnerability (XSS) in the Quick Tabs module 6.x-2.x before 6.x-2.1, 6.x-3.x before 6.x-3.1, and 7.x-3.x before 7.x-3.3 for Drupal
cvelistv5