PT-2014-6486

Name of the Vulnerable Software and Affected Versions Drupal Social Stats module versions prior to 7.x-1.5 Description The issue allows remote authenticated users with the "Content Type: Create new content" permission to inject arbitrary web script or HTML via vectors related to the configuration...