CVE-2012-4490

MEDIO 4.3CVE-2012-4490 · Published 31/10/2012 · updated 16/06/2026

In breve

CVE-2012-4490 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda excluded users (ricky morse).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.2%, superiore al 67.4% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
excluded users ricky_morse	`= 6.x-1.0`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Excluded Users module 6.x-1.x before 6.x-1.1 for Drupal allow remote attackers to inject arbitrary web script or HTML via a (1) user name or (2) email address.

References

drupal.org/node/1702984 · Patch
drupal.org/node/1708058 · Vendor Advisory
openwall.com/lists/oss-security/2012/10/04/6
openwall.com/lists/oss-security/2012/10/07/1
securityfocus.com/bid/54766

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free