EUVD-2015-3409

Malware in sbrugna...

CVE-2015-3364: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Content Analysis module before 6.x-1.7 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which are not properly handled in a log message...