Cross-site request forgery (CSRF) vulnerability in the Wishlist module 6.x-2.x before 6.x-2.6 and 7.x-2.x before 7.x-2.6 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting (XSS) sequences via the (1) wl_reveal or (2) q parameters.
References
Configurations
Configuration 1 (hide)
AND |
|
History
No history.
Information
Published : 2012-09-06 17:55
Updated : 2024-02-28 12:00
NVD link : CVE-2012-2069
Mitre link : CVE-2012-2069
CVE.ORG link : CVE-2012-2069
JSON object : View
Products Affected
mclewin
- wishlist
drupal
- drupal
CWE
CWE-352
Cross-Site Request Forgery (CSRF)