CVE-2012-1624 — Vulnerability intelligence

lingotek — ray enterprise translation

Published: 2012-10-06T21:55:04.363

CVSS

3.5

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

Multiple cross-site scripting (XSS) vulnerabilities in the Lingotek module 6.x-1.x before 6.x-1.40 for Drupal allow remote authenticated users to inject arbitrary web script or HTML when (1) creating or (2) editing page content.

Sources

• CVE-2012-1624
• Original advisory