PT-2009-4536 · Drupal · Taxonomy Manager

Name of the Vulnerable Software and Affected Versions: Taxonomy manager versions 5.x before 5.x-1.2 Description: A cross-site scripting XSS issue exists in the term data detail page of the Taxonomy manager module for Drupal. This allows remote authenticated users with specific privileges to injec...

SA-CONTRIB-2009-034 - Taxonomy manager - Cross site scripting

The Taxonomy manager module provides additional tools for administering taxonomy through Drupal. A vocabulary gets displayed in a dynamic tree view, where parent terms can be expanded to list their nested child terms or can be collapsed. The module does not properly escape some user-supplied data...