CVE-2012-6574: Cross-site scripting (XSS) vulnerability in the Fonecta verify module 7.x-1.x before 7.x-1.6 for Drupal all...

Security readout for executives and security teams

This is an old cross-site scripting issue in the Drupal Fonecta verify module. Sites using 7.x-1.x before 7.x-1.6 could allow remote attackers from certain sources to inject script or HTML. Sources do not provide CVSS, exact vectors, or evidence of active exploitation. Exposure is limited to Drupal sites that installed the Fonecta verify contributed module in the 7.x-1.x branch before 7.x-1.6. Organizations not using that module are not indicated as affected by the provided sources. Prioritize if legacy Drupal 7 sites still run this module, especially on public-facing properties. The business risk is browser-side compromise through injected content, but urgency is reduced by the age of the issue and lack of cited active exploitation. Mitigation focus: Inventory Drupal sites for the Fonecta verify module.; Upgrade Fonecta verify to 7.x-1.6 or later where still used.; Remove the module if it is no longer required..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.