CVE-2012-5553

Multiple cross-site scripting (XSS) vulnerabilities in the OM Maximenu module 6.x-1.x before 6.x-1.44 and 7.x-1.x before 7.x-1.44 for Drupal allow remote…

published December 3, 2012

CVSS
—
EPSS
1%
Percentile
60.6
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in the OM Maximenu module 6.x-1.x before 6.x-1.44 and 7.x-1.x before 7.x-1.44 for Drupal allow remote authenticated users with the "administer OM Maximenu" permission to inject arbitrary web script or HTML via the (1) Menu Title (2) Link Title, (3) Path Query, (4) Anchor, or (5) vocabulary names.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00941 · 60.6th percentile
Published
2012-12-03T21:00Z
EPSS history
Timeline
  • 03 DEC 21:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in the OM Maximenu module 6.x-1.x before 6.x-1.44 and 7.x-1.x before 7.x-1.44 for Drupal allow remote…
    cvelistv5