PT-2014-5798

Name of the Vulnerable Software and Affected Versions Drupal Touch theme versions 7.x-1.x before 7.x-1.9 Description The issue allows remote authenticated users with the Administer themes permission to inject arbitrary web script or HTML via vectors related to the Twitter and Facebook username...