CVE-2012-6573: Cross-site scripting (XSS) vulnerability in the Apache Solr Autocomplete module 6.x-1.x before 6.x-1.4 and...

Security readout for executives and security teams

This is a stored or reflected web scripting risk in a Drupal autocomplete module tied to Apache Solr search. A remote attacker may be able to make malicious script or HTML appear through autocomplete results. Business impact depends on where the module is used and who can trigger or view affected search suggestions. Exposure is likely limited to Drupal sites running the affected Apache Solr Autocomplete module versions. Internet-facing search/autocomplete features increase relevance, especially where authenticated users or administrators may view attacker-influenced suggestions. Treat this as a targeted remediation item for legacy Drupal estates. Prioritize public-facing or administrator-used search experiences, but do not escalate as an active-exploitation emergency based only on this bundle. Mitigation focus: Upgrade 6.x-1.x installations to 6.x-1.4 or later.; Upgrade 7.x-1.x installations to 7.x-1.3 or later.; Review the Drupal advisory before applying production changes..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.