CVE-2012-5558: Smiley Project Smiley

Medium severity, CVSS 4.8. EPSS: 1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the Smiley module 6.x-1.x versions prior to 6.x-1.1 and Smileys module 6.x-1.x versions prior to 6.x-1.1 for Drupal allows remote authenticated users with the "administer smiley" permission to inject arbitrary web script or HTML via a smiley acronym.

Affected products

• Smiley Project Smiley: from 6.x-1.0, before 6.x-1.1 (fixed in 6.x-1.1)
• Smileys Project Smileys: from 6.x-1.0, before 6.x-1.1 (fixed in 6.x-1.1)

Published 2020-01-09. Last modified 2026-06-16.