VULNERABILITY INTELLIGENCE

CVE-2012-5585

CVSS score2.1 LOW

EPSS probability1.04%

CISA KEVNot currently listed

Published2012-12-26

Last modified2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the Mixpanel module 6.x-1.x before 6.x-1.1 in Drupal allows remote authenticated users with the "access administration pages" permission to inject arbitrary web script or HTML via the Maxpanel token.