Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Project Issue File Review module PIFR module 6.x-2.x before 6.x-2.17 for Drupal allow 1 remote attackers to inject arbitrary web script or HTML via a crafted patch, which triggers a PIFR client to test the patch and return the results to th...

PT-2014-8720

Name of the Vulnerable Software and Affected Versions Drupal Project Issue File Review module PIFR versions 6.x-2.x before 6.x-2.17 Description The issue allows remote attackers to inject arbitrary web script or HTML via a crafted patch. This triggers a PIFR client to test the patch and return th...