Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Luke Herrington Clear all filters
TI-2012-04419 CVE-2012-5233 · GHSA-f5r2-9xf3-m4j7

Cross-site scripting (XSS) vulnerability in the stickynote module before 7.x-1.1 for…

Priority LOW 14

Cross-site scripting (XSS) vulnerability in the stickynote module before 7.x-1.1 for Drupal allows remote authenticated users with edit stickynotes privileges to inject arbitrary web script or HTML via unspecified vecotr…

CVSS 2.0LOW 2.1 Network Low privileges Interaction — EPSS 0.01535 Published 2012-10-01 No fix listed CWE-79
TI-2012-01425 CVE-2012-1636 · GHSA-853m-5x9w-frwp

Cross-site request forgery (CSRF) vulnerability in the stickynote module before 7.x-1.1…

Priority LOW 22

Cross-site request forgery (CSRF) vulnerability in the stickynote module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of users for requests that delete stickynotes via unspecified vector…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00903 Published 2012-10-01 No fix listed CWE-352