CVE-2012-5551

Published: Dec 3, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in the MailChimp module 7.x-2.x before 7.x-2.7 for Drupal allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) a predictable "webhook URL key" and (2) improper sanitization of "Webhook variables from POST requests."

Affected (13)

Products: Thinkshout: Mailchimp

Thinkshout

1 product

Mailchimp

Configuration A

13 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Thinkshout Mailchimp	Version 7.x-2.0
Thinkshout Mailchimp	Version 7.x-2.0 alpha1
Thinkshout Mailchimp	Version 7.x-2.0 beta1
Thinkshout Mailchimp	Version 7.x-2.0 beta2
Thinkshout Mailchimp	Version 7.x-2.0 rc1
Thinkshout Mailchimp	Version 7.x-2.0 rc2
Thinkshout Mailchimp	Version 7.x-2.1
Thinkshout Mailchimp	Version 7.x-2.2
Thinkshout Mailchimp	Version 7.x-2.3
Thinkshout Mailchimp	Version 7.x-2.4
Thinkshout Mailchimp	Version 7.x-2.5
Thinkshout Mailchimp	Version 7.x-2.6
Thinkshout Mailchimp	Version 7.x-2.x dev