PT-2012-3786

Name of the Vulnerable Software and Affected Versions Share Buttons AddToAny module versions 6.x-3.x before 6.x-3.4 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote authenticated users with the administer addtoany permission to inject arbitrary web...

CVE-2012-2072: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Share Buttons AddToAny module 6.x-3.x before 6.x-3.4 for Drupal allows remote authenticated users with the administer addtoany permission to inject arbitrary web script or HTML via unspecified vectors...