CVE-2012-5541

Published: Dec 3, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Twitter Pull module 6.x-1.x before 6.x-1.3 and 7.x-1.x before 7.x-1.0-rc3 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "data coming from Twitter."

Affected (8)

Products: Twitter Pull Project: Twitter Pull

Twitter Pull Project

1 product

Twitter Pull

Configuration A

8 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Twitter Pull Project Twitter Pull	Version 6.x-1.0
Twitter Pull Project Twitter Pull	Version 6.x-1.1
Twitter Pull Project Twitter Pull	Version 6.x-1.2
Twitter Pull Project Twitter Pull	Version 6.x-1.x dev
Twitter Pull Project Twitter Pull	Version 7.x-1.0 alpha1
Twitter Pull Project Twitter Pull	Version 7.x-1.0 rc1
Twitter Pull Project Twitter Pull	Version 7.x-1.0 rc2
Twitter Pull Project Twitter Pull	Version 7.x-1.x dev