CVE-2012-4471: Dominique Clause Search Autocomplete

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

The Search Autocomplete module 7.x-2.x before 7.x-2.4 for Drupal does not properly restrict access to the module admin page, which allows remote attackers to disable an autocompletion or change the priority order via unspecified vectors.

Affected products

  • Dominique Clause Search Autocomplete: version 7.x-2.0 only; version 7.x-2.1 only; version 7.x-2.3 only; version 7.x-2.x only

Published 2012-11-30. Last modified 2026-06-16.