CVE-2012-2711

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2012-06-27 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Taxonomy List module 6.x-1.x before 6.x-1.4 for Drupal allow remote authenticated users with create or edit taxonomy terms permissions to inject arbitrary web script or HTML via vectors related to taxonomy information.

Affected products

Nancy Wichmann Taxonomy List: 6.x-1.0, 6.x-1.0-beta1, 6.x-1.1, 6.x-1.2, 6.x-1.2-dev, 6.x-1.3 (+1)

References

http://drupal.org/node/1595396
http://drupal.org/node/1597262
http://drupalcode.org/project/taxonomy_list.git/commitdiff/7dd21a0
http://secunia.com/advisories/49238
http://www.openwall.com/lists/oss-security/2012/06/14/3
http://www.osvdb.org/82164
http://www.securityfocus.com/bid/53671
https://exchange.xforce.ibmcloud.com/vulnerabilities/75867
http://drupal.org/node/1595396
http://drupal.org/node/1597262
http://drupalcode.org/project/taxonomy_list.git/commitdiff/7dd21a0
http://secunia.com/advisories/49238

Get alerted when CVE-2012-2711 or the next vulnerability affects your stack