PT-2014-8399

Name of the Vulnerable Software and Affected Versions Drupal Tribune module versions 6.x-1.x through 7.x-3.x Description A cross-site scripting XSS issue exists, allowing remote authenticated users with specific permissions to inject arbitrary web script or HTML via a node title. Recommendations...