Search vulnerabilities

Results 2

Export CSV
CVE-2012-1636

Cross-site request forgery (CSRF) vulnerability in the stickynote module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of users for requests that delete stickynotes via unspecified vectors.

CVSS 2.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Products
CVE-2012-5233

Cross-site scripting (XSS) vulnerability in the stickynote module before 7.x-1.1 for Drupal allows remote authenticated users with edit stickynotes privileges to inject arbitrary web script or HTML via unspecified vecotrs.

CVSS 2.0 · 2.1 Low EPSS 1.5% KEV · Not listed
Products