CVE-2012-2712

N/A Unknown
Published: June 27, 2012 Modified: April 29, 2026
View on NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Search API module 7.x-1.x before 7.x-1.1 for Drupal, when supporting manual entry of field identifiers, allow remote attackers to inject arbitrary web script or HTML via vectors related to thrown exceptions and logging errors.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://drupal.org/node/1596524
Source: secalert@redhat.com
Patch
http://drupal.org/node/1597364
Source: secalert@redhat.com
Patch Vendor Advisory
http://drupalcode.org/project/search_api.git/commitdiff/5a18c8c
Source: secalert@redhat.com
Exploit Patch
http://secunia.com/advisories/49236
Source: secalert@redhat.com
Vendor Advisory
http://www.openwall.com/lists/oss-security/2012/06/14/3
Source: secalert@redhat.com
http://www.osvdb.org/82230
Source: secalert@redhat.com
http://www.securityfocus.com/bid/53672
Source: secalert@redhat.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/75868
Source: secalert@redhat.com
http://drupal.org/node/1596524
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://drupal.org/node/1597364
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Vendor Advisory
http://drupalcode.org/project/search_api.git/commitdiff/5a18c8c
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit Patch
http://secunia.com/advisories/49236
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.openwall.com/lists/oss-security/2012/06/14/3
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.osvdb.org/82230
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/53672
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/75868
Source: af854a3a-2127-422b-91ae-364da2661108

16 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
2.2%
80th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-79

Affected Vendors

thomas_seidl drupal

Related CVEs

CVE-2026-9677 N/A
CVE-2026-13245 6.1
CVE-2026-12404 5.3
CVE-2026-10820 N/A
CVE-2026-12415 9.8