Vulnerabilities > WIM Leers

DATE CVE VULNERABILITY TITLE RISK
2012-09-19 CVE-2012-1652 Cross-Site Scripting vulnerability in multiple products
Cross-site scripting (XSS) vulnerability in the Hierarchical Select module 6.x-3.x before 6.x-3.8 for Drupal allows remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML via unspecified vectors related to "the vocabulary's help text."
network
high complexity
wim-leers drupal wimleers CWE-79
2.1