Products: 1
    Vulnerabilities: 2
    Known Exploited: 0
    0
    Critical Level Threats
    0
    High Level Threats
    1
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2012-5587

    Cross-site scripting (XSS) vulnerability in the Email Field module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the mailto link.

    Last Modified: Apr 11, 2025
    Published: Dec 26, 2012

    CVE-2012-5588

    The Email Field module 6.x-1.x before 6.x-1.3 for Drupal, when using a field permission module and the field contact field formatter is set to the full or teaser display mode, does not properly check permissions, which allows remote attackers to email the stored address via unspecified vectors.

    Last Modified: Apr 11, 2025
    Published: Dec 26, 2012
    Items Per Page
    Epiqo Vulnerabilities & Security CVEs | CVE-DB