low3.5
CVE-2012-1624
Multiple cross-site scripting (XSS) vulnerabilities in the Lingotek module 6.x-1.x before 6.x-1.40 for Drupal allow remote authenticated users to inject arbitr…
Impact
Multiple cross-site scripting (XSS) vulnerabilities in the Lingotek module 6.x-1.x before 6.x-1.40 for Drupal allow remote authenticated users to inject arbitrary web script or HTML when (1) creating or (2) editing page content.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lingotek | Ray Enterprise Translation | through 6.x-1.4 Versions 6.x-1.0, 6.x-1.1, 6.x-1.3, 6.x-1.31 |