CVE-2012-2068

CVE-2012-2068 describes multiple cross-site scripting (XSS) vulnerabilities in the Fancy Slide module (fancy_slide.module) for Drupal, specifically versions prior to 6.x-2.7. These flaws allow authenticated users with administrative permissions to inject malicious web scripts via the node_title or nodequeue_title parameters. The vulnerability has a low severity CVSS score (AV:N/AC:H/Au:S/C:N/I:P/A:N), indicating network access, high attack complexity, and requiring authentication, with only partial impact on integrity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.