CVE-2012-1656: Wesjones Multisite Search

Medium severity, CVSS 6.8. EPSS: 1.3% chance of exploitation in the next 30 days.

SQL injection vulnerability in the Multisite Search module 6.x-2.2 for Drupal allows remote authenticated users with certain permissions to execute arbitrary SQL commands via the Site table prefix field.

Affected products

• Wesjones Multisite Search: version 6.x-2.2 only

Published 2012-09-18. Last modified 2026-06-16.