VYPR

Stickynote

by Luke Herrington

CVEs (2)

  • CVE-2012-5233Oct 1, 2012
    risk 0.00cvss epss 0.00

    Cross-site scripting (XSS) vulnerability in the stickynote module before 7.x-1.1 for Drupal allows remote authenticated users with edit stickynotes privileges to inject arbitrary web script or HTML via unspecified vecotrs.

  • CVE-2012-1636Oct 1, 2012
    risk 0.00cvss epss 0.00

    Cross-site request forgery (CSRF) vulnerability in the stickynote module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of users for requests that delete stickynotes via unspecified vectors.