PT-2015-6212

Name of the Vulnerable Software and Affected Versions Drupal Ajax Timeline module versions prior to 7.x-1.1 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via a node title, which can lead to cross-site scripting XSS attacks. Recommendations For...