PT-2014-4256

Name of the Vulnerable Software and Affected Versions Drupal Anonymous Posting module versions 7.x-1.2 through 7.x-1.3 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via the contact name field. Recommendations For versions 7.x-1.2...