← Back

Christopher Mitchell

christopher_mitchell

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Smart Breadcrumb
smart_breadcrumb
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2012-2705
1Christopher Mitchell
1Smart Breadcrumb
Apr 29, 2026
Jun 27, 2012
N/A· v4
N/A· v3
2.1 LOW· v2
The filter_titles function in the Smart Breadcrumb module 6.x-1.x before 6.x-1.3 for Drupal does not properly convert a title to plain-text, which allows remote authenticated users with create or edit node permissions to...Show more
The filter_titles function in the Smart Breadcrumb module 6.x-1.x before 6.x-1.3 for Drupal does not properly convert a title to plain-text, which allows remote authenticated users with create or edit node permissions to conduct cross-site scripting (XSS) attacks via the title parameter.Show less