CVE-2012-4492

Published: Oct 31, 2012Modified: Apr 29, 2026

2.1

Vector

AV:N/AC:H/Au:S/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Shorten URLs module 6.x-1.x before 6.x-1.13 and 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors to the (1) report or (2) Custom Services List page.

Affected (18)

Products: Isaac Sukin: Shorten

Isaac Sukin

1 product

Shorten

Configuration A

18 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Isaac Sukin Shorten	Version 6.x-1.0
Isaac Sukin Shorten	Version 6.x-1.10
Isaac Sukin Shorten	Version 6.x-1.11
Isaac Sukin Shorten	Version 6.x-1.12
Isaac Sukin Shorten	Version 6.x-1.1
Isaac Sukin Shorten	Version 6.x-1.2
Isaac Sukin Shorten	Version 6.x-1.3
Isaac Sukin Shorten	Version 6.x-1.4
Isaac Sukin Shorten	Version 6.x-1.5
Isaac Sukin Shorten	Version 6.x-1.6
Isaac Sukin Shorten	Version 6.x-1.7
Isaac Sukin Shorten	Version 6.x-1.8
Isaac Sukin Shorten	Version 6.x-1.9
Isaac Sukin Shorten	Version 6.x-1.x dev
Isaac Sukin Shorten	Version 7.x-1.0
Isaac Sukin Shorten	Version 7.x-1.0 rc1
Isaac Sukin Shorten	Version 7.x-1.1
Isaac Sukin Shorten	Version 7.x-1.x dev