CVE-2012-6576

https://notcve.org/view.php?id=CVE-2012-6576

Cross-site scripting (XSS) vulnerability in the PRH Search module 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers from certain sources to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad XSS en el módulo PRH Search 7.x-1.x anterior a 7.x-1.1 para Drupal, lo que permite a atacantes remotos desde diferentes orígenes inyectar secuencias de comandos web o HTML arbitrarias a través de vectores no especificados. • http://secunia.com/advisories/50672 https://drupal.org/node/1778778 https://drupal.org/node/1789252 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •