CVE-2012-2712: Thomas Seidl Search API

Low severity, CVSS 2.6. EPSS: 2.2% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in the Search API module 7.x-1.x before 7.x-1.1 for Drupal, when supporting manual entry of field identifiers, allow remote attackers to inject arbitrary web script or HTML via vectors related to thrown exceptions and logging errors.

Affected products

• Thomas Seidl Search API: version 7.x-1.0 only; version 7.x-1.x only

Published 2012-06-27. Last modified 2026-06-16.