CVE-2012-3800

LOW 2.1CVE-2012-3800 · Published 27/06/2012 · updated 16/06/2026

In short

CVE-2012-3800 is a LOW (CVSS 2.1) vulnerability affecting organic groups (moshe weitzman).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 76.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
organic groups moshe_weitzman	`= 6.x-2.0= 6.x-2.1= 6.x-2.2= 6.x-2.3= 6.x-2.x`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in og.js in the Organic Groups (OG) module 6.x-2.x before 6.x-2.4 for Drupal, when used with the Vertical Tabs module, allows remote authenticated users to inject arbitrary web script or HTML via vectors related the group title.

References

drupal.org/node/1619736 · Patch
drupal.org/node/1619810 · Patch
drupalcode.org/project/og.git/commitdiff/d48fef5 · Exploit
secunia.com/advisories/49397 · Vendor Advisory
openwall.com/lists/oss-security/2012/06/14/3
osvdb.org/82712
securityfocus.com/bid/53838
exchange.xforce.ibmcloud.com/vulnerabilities/76149

More vulnerabilities in organic groups

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free