CVE-2012-3800

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

Cross-site scripting (XSS) vulnerability in og.js in the Organic Groups (OG) module 6.x-2.x before 6.x-2.4 for Drupal, when used with the Vertical Tabs module, allows remote authenticated users to inject arbitrary web script or HTML via vectors related the group title.

Metrics

CVSS 2.0 2.1/10AV:N/AC:H/Au:S/C:N/I:P/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Jun 27, 2012
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-38024.0Unspecified vulnerability in the Post Affiliate Pro (PAP) module for Drupal allows remote authenticated users to read the commissions of oth CVE-2012-38054.3Multiple cross-site scripting (XSS) vulnerabilities in the getAllPassedParams function in system/functions.php in Kajona before 3.4.2 allow CVE-2012-38067.5Samsung Kies before 2.5.0.12094_27_11 contains a NULL pointer dereference vulnerability which could allow remote attackers to perform a deni CVE-2012-38079.8Samsung Kies before 2.5.0.12094_27_11 has arbitrary file execution.CVE-2012-38087.5Samsung Kies before 2.5.0.12094_27_11 has arbitrary file modification.CVE-2012-38097.5Samsung Kies before 2.5.0.12094_27_11 has arbitrary directory modification.CVE-2012-38107.5Samsung Kies before 2.5.0.12094_27_11 has registry modification.CVE-2012-381110.0Unrestricted file upload vulnerability in ImageUpload.ashx in the Wallboard application in Avaya IP Office Customer Call Reporter 7.0 before CVE-2012-38124.0Double free vulnerability in apps/app_voicemail.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Certified Asterisk 1 CVE-2012-38147.5Unrestricted file upload vulnerability in font-upload.php in the Font Uploader plugin 1.2.4 for WordPress allows remote attackers to execute CVE-2012-38159.3Buffer overflow in RunTime.exe in Sielco Sistemi Winlog Pro SCADA before 2.07.18 and Winlog Lite SCADA before 2.07.18 allows remote attacker CVE-2012-38167.8WinRadius Server 2009 allows remote attackers to cause a denial of service (crash) via a long password in an Access-Request packet.