Back to CVE records
Low 3.5Published Oct 6, 2012
CVE-2012-1624Multiple cross-site scripting (XSS) vulnerabilities in the Lingotek module 6.x-1.x before 6.x-1.40 for Drupal allow remote authenticated users to inject arbitrary web script or HTML when (1) creating…
Updated under an hour ago ()
Does this affect you?
It affects lingotek ray_enterprise_translation. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
Multiple cross-site scripting (XSS) vulnerabilities in the Lingotek module 6.x-1.x before 6.x-1.40 for Drupal allow remote authenticated users to inject arbitrary web script or HTML when (1) creating or (2) editing page content.
- CVSS
- 3.5 LOW (v2.0, NVD)AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weakness (CWE)
- CWE-79
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Not given
- NVD analysis
- Modified
- Record last updated
- Oct 20, 2026
- First seen by InfoSec Signals
- Oct 20, 2026
Affected products
lingotek ray_enterprise_translation lingotek:ray_enterprise_translation | through 6.x-1.4; 6.x-1.0; 6.x-1.1; 6.x-1.3; 6.x-1.31 | NVD |
References
- http://drupal.org/node/1394220
- http://drupal.org/node/1394412
- http://secunia.com/advisories/47453vendor-advisory
- http://www.openwall.com/lists/oss-security/2012/04/07/1
- http://www.osvdb.org/78185
- http://www.securityfocus.com/bid/51272
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72151
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.