CVE-2012-1630

https://notcve.org/view.php?id=CVE-2012-1630

Cross-site scripting (XSS) vulnerability in the Taxonomy Navigator module for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors. Una vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en el módulo Taxonomy Navigator para Drupal permite inyectar secuencias de comandos web o HTML a usuarios remotos autenticados con permisos específicos a través de vectores no especificados. • http://drupal.org/node/1401644 http://www.openwall.com/lists/oss-security/2012/04/07/1 http://www.securityfocus.com/bid/51387 https://exchange.xforce.ibmcloud.com/vulnerabilities/72387 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •