TI-2012-01440 CVE-2012-1651 · GHSA-ff2g-3pvh-5fjrCross-site scripting (XSS) vulnerability in the Submenu Tree module before 6.x-1.5 for…Priority LOW 19Cross-site scripting (XSS) vulnerability in the Submenu Tree module before 6.x-1.5 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.01046 · Published 2012-09-19 · No fix listed CWE-79