PT-2015-6207

Name of the Vulnerable Software and Affected Versions Drupal Taxonomy Tools module versions prior to 7.x-1.4 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via a node or taxonomy term title, potentially leading to cross-site scripting XSS attacks...