CVE-2012-1660

CVE-2012-1660 describes multiple cross-site scripting (XSS) vulnerabilities in the Webform module for Drupal, specifically affecting versions 6.x-3.x before 6.x-3.17 and 7.x-3.x before 7.x-3.17 when the "Select (or other)" module is enabled. Authenticated users with content creation permissions could inject malicious web scripts or HTML through crafted checkboxes or radio buttons. The vulnerability has a CVSS score indicating low severity, requiring user authentication and high attack complexity, with a potential impact of partial integrity compromise. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.