Unrated severityNVD Advisory· Published Jan 24, 2012· Updated Apr 29, 2026
CVE-2012-0914
CVE-2012-0914
Description
Cross-site scripting (XSS) vulnerability in display_renderers/panels_renderer_editor.class.php in the admin view in the Panels module 6.x-2.x before 6.x-3.10 and 7.x-3.x before 7.x-3.0 for Drupal allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the Region title.
Affected products
22cpe:2.3:a:earl_miles:panels:6.x-3.0:*:*:*:*:*:*:*+ 21 more
- cpe:2.3:a:earl_miles:panels:6.x-3.0:*:*:*:*:*:*:*
- cpe:2.3:a:earl_miles:panels:6.x-3.0:alpha1:*:*:*:*:*:*
- cpe:2.3:a:earl_miles:panels:6.x-3.0:alpha2:*:*:*:*:*:*
- cpe:2.3:a:earl_miles:panels:6.x-3.0:alpha3:*:*:*:*:*:*
- cpe:2.3:a:earl_miles:panels:6.x-3.0:alpha4:*:*:*:*:*:*
- cpe:2.3:a:earl_miles:panels:6.x-3.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:earl_miles:panels:6.x-3.0:beta2:*:*:*:*:*:*
- cpe:2.3:a:earl_miles:panels:6.x-3.0:beta4:*:*:*:*:*:*
- cpe:2.3:a:earl_miles:panels:6.x-3.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:earl_miles:panels:6.x-3.1:*:*:*:*:*:*:*
- cpe:2.3:a:earl_miles:panels:6.x-3.2:*:*:*:*:*:*:*
- cpe:2.3:a:earl_miles:panels:6.x-3.3:*:*:*:*:*:*:*
- cpe:2.3:a:earl_miles:panels:6.x-3.4:*:*:*:*:*:*:*
- cpe:2.3:a:earl_miles:panels:6.x-3.5:*:*:*:*:*:*:*
- cpe:2.3:a:earl_miles:panels:6.x-3.7:*:*:*:*:*:*:*
- cpe:2.3:a:earl_miles:panels:6.x-3.8:*:*:*:*:*:*:*
- cpe:2.3:a:earl_miles:panels:6.x-3.9:*:*:*:*:*:*:*
- cpe:2.3:a:earl_miles:panels:6.x-3.x:dev:*:*:*:*:*:*
- cpe:2.3:a:earl_miles:panels:7.x-3.0:alpha1:*:*:*:*:*:*
- cpe:2.3:a:earl_miles:panels:7.x-3.0:alpha2:*:*:*:*:*:*
- cpe:2.3:a:earl_miles:panels:7.x-3.0:alpha3:*:*:*:*:*:*
- cpe:2.3:a:earl_miles:panels:7.x-3.x:dev:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
10- drupal.org/node/1409436nvdPatchVendor Advisory
- drupal.org/node/1409446nvdPatch
- drupal.org/node/1409448nvdPatch
- www.madirish.net/content/drupal-panels-6x-39-xss-vulnerabilitynvdPatch
- secunia.com/advisories/47649nvdVendor Advisory
- drupalcode.org/project/panels.git/commit/2066d59nvd
- drupalcode.org/project/panels.git/commit/d844942nvd
- osvdb.org/78367nvd
- www.securityfocus.com/bid/51568nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/72549nvd
News mentions
0No linked articles in our index yet.