CVE-2012-0914 Cross-site scripting (XSS) vulnerability in display_renderers/panels_renderer_editor.class.php in the admin view in the Panels module 6.x-2.x before 6.x-3.10 and 7.x-3.x before 7.x-3.0 for Drupal allo...
MediumCVSS 4.3
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in display_renderers/panels_renderer_editor.class.php in the admin view in the Panels module 6.x-2.x before 6.x-3.10 and 7.x-3.x before 7.x-3.0 for Drupal allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the Region title.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| earl miles panels | = 6.x-3.0 | No fix listed |
| earl miles panels | = 6.x-3.0-alpha1 | No fix listed |
| earl miles panels | = 6.x-3.0-alpha2 | No fix listed |
| earl miles panels | = 6.x-3.0-alpha3 | No fix listed |
| earl miles panels | = 6.x-3.0-alpha4 | No fix listed |
| earl miles panels | = 6.x-3.0-beta1 | No fix listed |
| earl miles panels | = 6.x-3.0-beta2 | No fix listed |
| earl miles panels | = 6.x-3.0-beta4 | No fix listed |
| earl miles panels | = 6.x-3.0-rc1 | No fix listed |
| earl miles panels | = 6.x-3.1 | No fix listed |
| earl miles panels | = 6.x-3.2 | No fix listed |
| earl miles panels | = 6.x-3.3 | No fix listed |
| earl miles panels | = 6.x-3.4 | No fix listed |
| earl miles panels | = 6.x-3.5 | No fix listed |
| earl miles panels | = 6.x-3.7 | No fix listed |
| earl miles panels | = 6.x-3.8 | No fix listed |
| earl miles panels | = 6.x-3.9 | No fix listed |
| earl miles panels | = 6.x-3.x-dev | No fix listed |
| earl miles panels | = 7.x-3.0-alpha1 | No fix listed |
| earl miles panels | = 7.x-3.0-alpha2 | No fix listed |
| earl miles panels | = 7.x-3.0-alpha3 | No fix listed |
| earl miles panels | = 7.x-3.x-dev | No fix listed |
References
- drupal.org patch vendor-advisory
- drupal.org patch
- drupal.org patch
- drupalcode.org
- drupalcode.org
- 78367 vdb-entry
- 47649 third-party-advisory vendor-advisory
- www.madirish.net patch
- 51568 vdb-entry
- drupal-panels-unspecified-xss(72549) vdb-entry