CVE-2012-2072: Patrick Przybilla Addtoany

Low severity, CVSS 2.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the Share Buttons (AddToAny) module 6.x-3.x before 6.x-3.4 for Drupal allows remote authenticated users with the administer addtoany permission to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Patrick Przybilla Addtoany: version 6.x-3.0 only; version 6.x-3.1 only; version 6.x-3.2 only; version 6.x-3.3 only; version 6.x-3.x only

Published 2012-08-14. Last modified 2026-06-16.