CVE-2012-5558

Cross-site scripting (XSS) vulnerability in the Smiley module 6.x-1.x versions prior to 6.x-1.1 and Smileys module 6.x-1.x versions prior to 6.x-1.1 for Drupal allows remote authenticated users with the "administer smiley" permission to inject arbitrary web script or HTML via a smiley acronym.

• CWE-79

• http://drupal.org/node/1840892Vendor Advisory
• http://drupal.org/node/1840954Vendor Advisory
• http://drupal.org/node/1840956Vendor Advisory
• http://www.openwall.com/lists/oss-security/2012/11/20/4Mailing List, Third Party Advisory
• http://drupal.org/node/1840892Vendor Advisory
• http://drupal.org/node/1840954Vendor Advisory
• http://drupal.org/node/1840956Vendor Advisory
• http://www.openwall.com/lists/oss-security/2012/11/20/4Mailing List, Third Party Advisory

Published

Jan 9, 2020

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-5552The Password policy module 6.x-1.x before 6.x-1.5 and 7.x-1.…
• CVE-2012-5553Multiple cross-site scripting (XSS) vulnerabilities in the O…
• CVE-2012-5554The default configuration for the Webform CiviCRM Integratio…
• CVE-2012-5555Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2012-5556Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2012-5557The User Read-Only module 6.x-1.x before 6.x-1.4 and 7.x-1.x…
• CVE-2012-5559Cross-site scripting (XSS) vulnerability in the page manager…
• CVE-2012-5560The default configuration in mate-settings-daemon 1.5.3 allo…
• CVE-2012-5561script/katello-generate-passphrase in Katello 1.1 uses world…
• CVE-2012-5562A flaw was found in rhn-proxy. This vulnerability may allow …8.6
• CVE-2012-5563OpenStack Keystone, as used in OpenStack Folsom 2012.2, does…
• CVE-2012-5564android-tools 4.1.1 in Android Debug Bridge (ADB) allows loc…