PT-2012-5431

Name of the Vulnerable Software and Affected Versions Gallery formatter module versions prior to 7.x-1.2 Description The issue allows remote authenticated users with permissions to create a node or entity to inject arbitrary web script or HTML via the title or alt parameter in the galleryformatte...