PT-2012-3404

Name of the Vulnerable Software and Affected Versions Drupal Managesite module versions 6.x-1.x before 6.1-1.1 Description The issue allows remote authenticated users with administer managesite permissions to inject arbitrary web script or HTML via the title parameter when adding or updating a...