medium4.3
CVE-2012-2706
Cross-site scripting (XSS) vulnerability in the Post Affiliate Pro (PAP) module for Drupal allows remote attackers to inject arbitrary web script or HTML via v…
Impact
Cross-site scripting (XSS) vulnerability in the Post Affiliate Pro (PAP) module for Drupal allows remote attackers to inject arbitrary web script or HTML via vectors related to user registration.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Peter Pokrivcak | Post Affiliate Pro | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://drupal.org/node/1585648
- http://www.openwall.com/lists/oss-security/2012/06/14/3
- http://www.securityfocus.com/bid/53589
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75716
- http://drupal.org/node/1585648
- http://www.openwall.com/lists/oss-security/2012/06/14/3
- http://www.securityfocus.com/bid/53589
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75716