Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-2083
4.3
MEDIUMCVSS v2
Published
August 31, 2012
Affected
5 projects
Assigned by
Red Hat
Severity scale
010
Description
Cross-site scripting (XSS) vulnerability in the fusion_core_preprocess_page function in fusion_core/template.php in the Fusion module before 6.x-1.13 for Drupal allows remote attackers to inject arbitrary web script or HTML via the q parameter.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.all versionsNVD
NPM
fusion
NPM
RubyGems