SA-CONTRIB-2015-035 - Ajax Timeline - Cross Site Scripting (XSS)
Ajax Timeline module enables you to display a vertical timeline of nodes based off a date field or created date of the configured nodes. The module doesn't sufficiently escape node titles when displaying the timeline, allowing a malicious user to inject code. This vulnerability is mitigated by th...