CVE-2012-0914

CVE-2012-0914 describes a cross-site scripting (XSS) vulnerability in the Panels module for Drupal, specifically affecting versions 6.x-2.x before 6.x-3.10 and 7.x-3.x before 7.x-3.0. This flaw allows authenticated users with specific administrative privileges to inject malicious web script or HTML through the "Region title" field in the admin view. The vulnerability has a CVSS score of 4.3, indicating medium complexity for exploitation and a potential impact of partial integrity compromise, as it requires authenticated access and user interaction. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.