CVE-2012-6575: Cross-site scripting (XSS) vulnerability in the Exposed Filter Data module 6.x-1.x before 6.x-1.2 for Drupa...

Security readout for executives and security teams

This is a cross-site scripting issue in the Drupal Exposed Filter Data module. A remote attacker could inject script or HTML through unspecified input paths. The business risk depends on whether the vulnerable module is installed and exposed to users. Exposure is likely limited to Drupal sites using Exposed Filter Data 6.x-1.x versions earlier than 6.x-1.2. The provided data does not identify other affected products or configurations. Prioritize remediation for internet-facing Drupal sites that use this module. The vulnerability is old and sparse on detail, but XSS can affect user trust, sessions, and administrative workflows. Mitigation focus: Inventory Drupal sites for the Exposed Filter Data module.; Upgrade Exposed Filter Data to 6.x-1.2 or later where applicable.; Review Drupal project guidance before applying production changes..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.