CVE-2012-1624: XSS
Multiple cross-site scripting (XSS) vulnerabilities in the Lingotek module 6.x-1.x before 6.x-1.40 for Drupal allow remote authenticated users to inject arbitrary web script or HTML when (1) creating or (2) editing page content.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1624?
CVE-2012-1624 is classified as a medium severity vulnerability due to its potential for exploitation in cross-site scripting attacks.
How do I fix CVE-2012-1624?
To fix CVE-2012-1624, upgrade the Lingotek module to version 6.x-1.40 or later.
Who is affected by CVE-2012-1624?
CVE-2012-1624 affects users of the Lingotek module versions prior to 6.x-1.40 in Drupal.
What are the consequences of CVE-2012-1624?
The consequences of CVE-2012-1624 include the potential for remote authenticated users to inject arbitrary web scripts or HTML.
Is CVE-2012-1624 being actively exploited?
There have been reports indicating that CVE-2012-1624 may be actively exploited in the wild, emphasizing the need for immediate patching.