PT-2012-5436

Name of the Vulnerable Software and Affected Versions Drupal Excluded Users module versions 6.x-1.x before 6.x-1.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via a user name or email address, potentially leading to cross-site scripting XSS attacks...