Cross-site scripting (XSS) vulnerability in the Smiley module 6.x-1.x versions prior to 6.x-1.1 and Smileys module 6.x-1.x versions prior to 6.x-1.1 for Drupal allows remote authenticated users with the “administer smiley” permission to inject arbitrary web script or HTML via a smiley acronym.
CPE | Name | Operator | Version |
---|---|---|---|
smiley | eq | >= 6.x1.0 AND < 6.x1.1 | |
smileys | eq | >= 6.x1.0 AND < 6.x1.1 |