CVE-2012-4484: Cross-site scripting (XSS) vulnerability in the administrative interface in the Campaign Monitor module bef...

Security readout for executives and security teams

This CVE is an XSS flaw in the administrative interface of the independently developed Drupal Campaign Monitor module before 6.x-2.5. An attacker could inject script or HTML into admin-facing pages. It is not a vulnerability in Campaign Monitor’s own software. The public record lacks CVSS, affected Drupal versions, and exploit details. Exposure is limited to Drupal sites with the contributed Campaign Monitor module installed and running versions before 6.x-2.5. Sites not using that Drupal module are not indicated as affected by the supplied sources. Treat this as a targeted legacy Drupal module issue. Prioritize if the organization still operates Drupal sites using this module, especially internet-reachable administrative workflows. Otherwise, business urgency is low. Mitigation focus: Inventory Drupal sites for the Campaign Monitor contributed module.; Upgrade the module to version 6.x-2.5 or later if applicable.; Check Drupal project advisories for any version-specific guidance..

Prepared

Jun 24, 2026, 19:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.