Vulnerabilities

TI-2012-04703 CVE-2012-5588 · GHSA-6975-wf7j-2rx4

The Email Field module 6.x-1.x before 6.x-1.3 for Drupal, when using a field permission…

LOW 16

The Email Field module 6.x-1.x before 6.x-1.3 for Drupal, when using a field permission module and the field contact field formatter is set to the full or teaser display mode, does not properly check permissions, which a…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01162 Published 2012-12-26 No fix listed CWE-264

TI-2012-04702 CVE-2012-5587 · GHSA-82r6-2vq4-p5p2

Cross-site scripting (XSS) vulnerability in the Email Field module 6.x-1.x before 6.x-1.3…

LOW 22

Cross-site scripting (XSS) vulnerability in the Email Field module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the mailto link.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01148 Published 2012-12-26 No fix listed CWE-79

Vulnerabilities

Filters

The Email Field module 6.x-1.x before 6.x-1.3 for Drupal, when using a field permission…

Cross-site scripting (XSS) vulnerability in the Email Field module 6.x-1.x before 6.x-1.3…