CVE-2012-2065: XSS
Cross-site scripting (XSS) vulnerability in the Language Icons module 6.x-2.x before 6.x-2.1 and 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with administer languages permissions to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2065?
CVE-2012-2065 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2012-2065?
To fix CVE-2012-2065, upgrade to the latest versions of the Language Icons module, specifically 6.x-2.1 or 7.x-1.0 or higher.
Who is affected by CVE-2012-2065?
CVE-2012-2065 affects Drupal installations using the Language Icons module version 6.x-2.0 before 6.x-2.1 and 7.x-1.x before 7.x-1.0.
What types of attacks can exploit CVE-2012-2065?
CVE-2012-2065 can be exploited to conduct cross-site scripting (XSS) attacks, allowing attackers to inject arbitrary web scripts into a site.
What are the indicators of compromise for CVE-2012-2065?
Indicators of compromise for CVE-2012-2065 may include unusual database entries or HTTP requests that involve injected scripts associated with the Language Icons module.