CVE-2012-5559

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-12-03 · updated 2026-06-16
Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in the page manager node view task in the Chaos tool suite (ctools) module 6.x-1.x before 6.x-1.10 for Drupal allows remote authenticated users with permissions to submit or edit nodes to inject arbitrary web script or HTML via the page title.

Affected products

Chaos Tool Suite Project Ctools: 6.x-1.0, 6.x-1.0-alpha1, 6.x-1.0-alpha2, 6.x-1.0-alpha3, 6.x-1.0-beta1, 6.x-1.0-beta2 (+13)

References

http://drupal.org/node/1840992
http://drupal.org/node/1841030
http://secunia.com/advisories/51259
http://www.openwall.com/lists/oss-security/2012/11/20/4
http://drupal.org/node/1840992
http://drupal.org/node/1841030
http://secunia.com/advisories/51259
http://www.openwall.com/lists/oss-security/2012/11/20/4

Get alerted when CVE-2012-5559 or the next vulnerability affects your stack