CVE-2012-4485: Manuel Garcia Galleryformatter

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in the galleryformatter_field_formatter_view functiuon in galleryformatter.tpl.php the Gallery formatter module before 7.x-1.2 for Drupal allow remote authenticated users with permissions to create a node or entity to inject arbitrary web script or HTML via the (1) title or (2) alt parameter.

Affected products

• Manuel Garcia Galleryformatter: up to and including 7.x-1.1; version 6.x-1.0 only; version 6.x-1.x only; version 7.x-1.0 only; version 7.x-1.x only

Published 2012-10-31. Last modified 2026-06-16.