CVE-2012-4476: XSS
Published Nov 30, 2012
·Updated
Cross-site scripting (XSS) vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
2 affected components
David Alkire Drag \& Drop Gallery=6.x-1.5
Drupal Drupal
Remediation
Patch Available
Event History
Nov 30, 2012
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4476?
CVE-2012-4476 has a medium severity level due to its cross-site scripting (XSS) exploitation potential.
2
How do I fix CVE-2012-4476?
To fix CVE-2012-4476, update the Drag & Drop Gallery module to the latest version that addresses this vulnerability.
3
Who is affected by CVE-2012-4476?
CVE-2012-4476 affects users of the Drag & Drop Gallery module version 6.x-1.5 for Drupal.
4
What type of vulnerability is CVE-2012-4476?
CVE-2012-4476 is a cross-site scripting (XSS) vulnerability that allows remote code execution through injected scripts.
5
Can CVE-2012-4476 be exploited remotely?
Yes, CVE-2012-4476 can be exploited remotely by attackers to inject arbitrary web scripts or HTML.