CVE-2012-5551: XSS
Multiple cross-site scripting (XSS) vulnerabilities in the MailChimp module 7.x-2.x before 7.x-2.7 for Drupal allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) a predictable "webhook URL key" and (2) improper sanitization of "Webhook variables from POST requests."
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-5551?
The severity of CVE-2012-5551 is classified as high due to multiple cross-site scripting vulnerabilities allowing remote code execution.
How do I fix CVE-2012-5551?
To fix CVE-2012-5551, upgrade the MailChimp module to version 7.x-2.7 or later.
Which versions of MailChimp are affected by CVE-2012-5551?
Versions of MailChimp 7.x-2.0 through 7.x-2.6 are affected by CVE-2012-5551.
What type of attacks can CVE-2012-5551 enable?
CVE-2012-5551 can enable attackers to inject arbitrary web scripts or HTML into web pages.
Is there a workaround for CVE-2012-5551?
There is no recommended workaround for CVE-2012-5551 other than upgrading the module.