PT-2009-5472 · Drupal · Date Module

Name of the Vulnerable Software and Affected Versions: Drupal Date module versions prior to 6.x-2.3 Description: A cross-site scripting XSS issue exists in the Date Tools sub-module of the Date module, allowing remote authenticated users with specific privileges to inject arbitrary web script or...