CVE-2012-2907

The CVE-2012-2907 issue affects the Aberdeen theme for Drupal (versions 6.x-1.x prior to 6.x-1.11). The vulnerability arises in the aberdeen_breadcrumb function (template.php) when the option to append the content title to the breadcrumb is enabled, allowing remote attackers to inject arbitrary w...

CVE-2012-2907: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the aberdeenbreadcrumb function in template.php in the Aberdeen theme 6.x-1.x before 6.x-1.11 for Drupal, when set to append the content title to the breadcrumb, allows remote attackers to inject arbitrary web script or HTML via the content title in a...