PT-2015-6180

Name of the Vulnerable Software and Affected Versions Drupal Room Reservations module versions prior to 7.x-1.1 Description The issue allows remote authenticated users with the "Administer the room reservations system" permission to inject arbitrary web script or HTML. This can be achieved via th...

Multiple Cross-Site Scripting Vulnerabilities in Drupal Room Reservations Module

Drupal is a free and open source content management system developed in PHP. Multiple cross-site scripting vulnerabilities exist in the Drupal Room Reservations module because it fails to properly filter user-supplied input. An attacker could use these vulnerabilities to execute arbitrary script...