← Back

CVE-2012-1660

nvd nist
Published: Sep 18, 2012Modified: Apr 29, 2026

JSON object

Loading...
2.1
Vector
AV:N/AC:H/Au:S/C:N/I:P/A:N
Exploitability: 3.9 / Impact: 2.9
Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in components/select.inc in the Webform module 6.x-3.x before 6.x-3.17 and 7.x-3.x before 7.x-3.17 for Drupal, when the "Select (or other)" module is enabled, allow remote authenticated users with the create webform content permission to inject arbitrary web script or HTML via vectors related to (1) checkboxes or (2) radios.

Affected (44)

Products: Nathan Haug: Webform
1 product
Webform
Configuration A
44 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Nathan Haug
Version 6.x-3.0
Version 6.x-3.0 beta1
Version 6.x-3.0 beta2
Version 6.x-3.0 beta3
Version 6.x-3.0 beta4
Version 6.x-3.0 beta5
Version 6.x-3.0 beta6
Version 6.x-3.10
Version 6.x-3.11
Version 6.x-3.12
Version 6.x-3.13
Version 6.x-3.14
Version 6.x-3.15
Version 6.x-3.16
Version 6.x-3.1
Version 6.x-3.2
Version 6.x-3.3
Version 6.x-3.4
Version 6.x-3.5
Version 6.x-3.6
Version 6.x-3.7
Version 6.x-3.8
Version 6.x-3.9
Version 6.x-3.x dev
Version 7.x-3.0 beta2
Version 7.x-3.0 beta3
Version 7.x-3.0 beta4
Version 7.x-3.0 beta5
Version 7.x-3.0 beta6
Version 7.x-3.0 beta7
Version 7.x-3.0 beta8
Version 7.x-3.10
Version 7.x-3.11
Version 7.x-3.12
Version 7.x-3.13
Version 7.x-3.15
Version 7.x-3.16
Version 7.x-3.3 beta1
Version 7.x-3.4 beta1
Version 7.x-3.6
Version 7.x-3.7
Version 7.x-3.8
Version 7.x-3.9
Version 7.x-3.x dev
Running on/withPlatform Versions
Drupal
Drupal
All versions

References (20)

Source: secalert@redhat.com
Patch
Source: secalert@redhat.com
Patch
Source: secalert@redhat.com
PatchVendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Source: secalert@redhat.com
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.