Cross-site scripting (XSS) vulnerability in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.x before 7.x-2.0-alpha8 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the "checkbox and radio button functionalities."
Conclusion & alert: CVE-2012-1561 is rated Moderate Risk (49.6/100): CVSS Medium severity, with medium exploitation likelihood (EPSS 3.01%). Core evidence: EPSS rose +2.41% over the last day, indicating growing attacker interest. Mandatory action: Review affected assets and schedule remediation.
Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.
EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).
| # | Date | Old EPSS score | New EPSS score | Delta (New - Old) |
|---|---|---|---|---|
| 1 | 2026-06-15 | 0.60% | 3.01% | +2.41% |
| 2 | 2026-02-17 | 0.46% | 0.60% | +0.14% |
| 3 | 2025-07-17 | — | 0.46% | — |
Full EPSS history (7 records total)
CVSS metrics for this CVE.
| Base score | Version | Severity | Vector | Exploitability | Impact | Score source |
|---|---|---|---|---|---|---|
| 4.3 | 2.0 | MEDIUM |
|
8.6 | 2.9 | [email protected] |
| Vendor | Product | Version | Raw CPE |
|---|---|---|---|
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha1:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha10:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha11:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha12:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha13:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha14:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha15:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha16:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha17:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha18:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha19:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha2:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha20:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha21:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha22:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha23:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha24:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha25:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha26:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha27:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha28:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha3:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha4:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha5:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha6:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha7:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha8:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:alpha9:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:beta1:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:beta2:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:beta3:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:rc1:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:rc2:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:rc3:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:rc4:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:unstable0:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:unstable1:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:unstable2:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:unstable3:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:unstable4:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:unstable5:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:unstable6:*:*:*:*:*:* |
| danielb | finder | 6.x-1.0 | cpe:2.3:a:danielb:finder:6.x-1.0:unstable7:*:*:*:*:*:* |
| danielb | finder | 6.x-1.1 | cpe:2.3:a:danielb:finder:6.x-1.1:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.2 | cpe:2.3:a:danielb:finder:6.x-1.2:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.3 | cpe:2.3:a:danielb:finder:6.x-1.3:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.4 | cpe:2.3:a:danielb:finder:6.x-1.4:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.5 | cpe:2.3:a:danielb:finder:6.x-1.5:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.6 | cpe:2.3:a:danielb:finder:6.x-1.6:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.7 | cpe:2.3:a:danielb:finder:6.x-1.7:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.8 | cpe:2.3:a:danielb:finder:6.x-1.8:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.9 | cpe:2.3:a:danielb:finder:6.x-1.9:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.10 | cpe:2.3:a:danielb:finder:6.x-1.10:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.11 | cpe:2.3:a:danielb:finder:6.x-1.11:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.12 | cpe:2.3:a:danielb:finder:6.x-1.12:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.13 | cpe:2.3:a:danielb:finder:6.x-1.13:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.14 | cpe:2.3:a:danielb:finder:6.x-1.14:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.15 | cpe:2.3:a:danielb:finder:6.x-1.15:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.16 | cpe:2.3:a:danielb:finder:6.x-1.16:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.17 | cpe:2.3:a:danielb:finder:6.x-1.17:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.18 | cpe:2.3:a:danielb:finder:6.x-1.18:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.19 | cpe:2.3:a:danielb:finder:6.x-1.19:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.20 | cpe:2.3:a:danielb:finder:6.x-1.20:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.21 | cpe:2.3:a:danielb:finder:6.x-1.21:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.23 | cpe:2.3:a:danielb:finder:6.x-1.23:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.24 | cpe:2.3:a:danielb:finder:6.x-1.24:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.25 | cpe:2.3:a:danielb:finder:6.x-1.25:*:*:*:*:*:*:* |
| danielb | finder | 6.x-1.x-dev | cpe:2.3:a:danielb:finder:6.x-1.x-dev:*:*:*:*:*:*:* |
| danielb | finder | 7.x-1.0 | cpe:2.3:a:danielb:finder:7.x-1.0:*:*:*:*:*:*:* |
| danielb | finder | 7.x-1.1 | cpe:2.3:a:danielb:finder:7.x-1.1:*:*:*:*:*:*:* |
| danielb | finder | 7.x-1.2 | cpe:2.3:a:danielb:finder:7.x-1.2:*:*:*:*:*:*:* |
| danielb | finder | 7.x-1.3 | cpe:2.3:a:danielb:finder:7.x-1.3:*:*:*:*:*:*:* |
| danielb | finder | 7.x-1.4 | cpe:2.3:a:danielb:finder:7.x-1.4:*:*:*:*:*:*:* |
| danielb | finder | 7.x-1.5 | cpe:2.3:a:danielb:finder:7.x-1.5:*:*:*:*:*:*:* |
| danielb | finder | 7.x-1.6 | cpe:2.3:a:danielb:finder:7.x-1.6:*:*:*:*:*:*:* |
| danielb | finder | 7.x-1.x | cpe:2.3:a:danielb:finder:7.x-1.x:dev:*:*:*:*:*:* |
| danielb | finder | 7.x-2.0 | cpe:2.3:a:danielb:finder:7.x-2.0:alpha1:*:*:*:*:*:* |
| danielb | finder | 7.x-2.0 | cpe:2.3:a:danielb:finder:7.x-2.0:alpha2:*:*:*:*:*:* |
| danielb | finder | 7.x-2.0 | cpe:2.3:a:danielb:finder:7.x-2.0:alpha3:*:*:*:*:*:* |