Field Assessment
AI analysis pending.
CVE
CVE-2012-2071
Severity
LOW
CVSS
2.1
EPSS
1.06%
Original Filing — NVD Description
Cross-site scripting (XSS) vulnerability in the Contact Forms module 6.x-1.x before 6.x-1.13 for Drupal when the core contact form is enabled, allows remote authenticated users with the administer site-wide contact form permission to inject arbitrary web script or HTML via unspecified vectors.