CVE-2012-5553

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-12-03 · updated 2026-06-16
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in the OM Maximenu module 6.x-1.x before 6.x-1.44 and 7.x-1.x before 7.x-1.44 for Drupal allow remote authenticated users with the "administer OM Maximenu" permission to inject arbitrary web script or HTML via the (1) Menu Title (2) Link Title, (3) Path Query, (4) Anchor, or (5) vocabulary names.

Affected products

Daniel Honrade Om Maximenu: 6.x-1.0, 6.x-1.0-rc1, 6.x-1.0-rc2, 6.x-1.0-rc3, 6.x-1.0-rc4, 6.x-1.0-rc5 (+91)

References

http://drupal.org/node/1834046
http://drupal.org/node/1834048
http://drupal.org/node/1834866
http://www.madirish.net/551
http://www.openwall.com/lists/oss-security/2012/11/20/4
http://drupal.org/node/1834046
http://drupal.org/node/1834048
http://drupal.org/node/1834866
http://www.madirish.net/551
http://www.openwall.com/lists/oss-security/2012/11/20/4

Get alerted when CVE-2012-5553 or the next vulnerability affects your stack