CVE-2012-5558
Medium
Description
Cross-site scripting (XSS) vulnerability in the Smiley module 6.x-1.x versions prior to 6.x-1.1 and Smileys module 6.x-1.x versions prior to 6.x-1.1 for Drupal allows remote authenticated users with the "administer smiley" permission to inject arbitrary web script or HTML via a smiley acronym.
SeverityMedium
CVSS4.8
Exploit probability—
ProductSmiley
PublishedJan 9, 2020
First seenJan 9, 2020
How to fix
Update
- smiley_project smiley6.x-1.1 or later
- smileys_project smileys6.x-1.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| smiley_project smiley | 6.x-1.0 ≤ v < 6.x-1.1 | 6.x-1.1 |
| smileys_project smileys | 6.x-1.0 ≤ v < 6.x-1.1 | 6.x-1.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.