PT-2012-6030

Name of the Vulnerable Software and Affected Versions Drupal Basic webmail module version 6.x-1.x before 6.x-1.2 Description The issue allows remote attackers to inject arbitrary web script or HTML via a page title or a crafted email message, potentially leading to cross-site scripting XSS attack...