BaselineWatch
Desk

CVE-2012-1624

3.5 low Modified

Multiple cross-site scripting (XSS) vulnerabilities in the Lingotek module 6.x-1.x before 6.x-1.40 for Drupal allow remote authenticated users to inject arbitrary web script or HTML when (1) creating or (2) editing page content.

Fix

Patch, vendor advisory and mitigation references on NVD 2

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 3.5 · lingotekNVD modified 2026-10-20 17:49

Affected (CPE criteria) 5

  • cpe:2.3:a:lingotek:ray_enterprise_translation:*:*:*:*:*:*:*:*
  • cpe:2.3:a:lingotek:ray_enterprise_translation:6.x-1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:lingotek:ray_enterprise_translation:6.x-1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:lingotek:ray_enterprise_translation:6.x-1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:lingotek:ray_enterprise_translation:6.x-1.31:*:*:*:*:*:*:*

References 14