PT-2015-6174

Name of the Vulnerable Software and Affected Versions Drupal Field Display Label module versions prior to 7.x-1.3 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via the alternate field label in content types settings, which is a cross-site scripting...