CVE-2009-1069

Multiple cross-site scripting XSS vulnerabilities in the node edit form feature in Drupal Content Construction Kit CCK 6.x before 6.x-2.2, a module for Drupal, allow remote attackers to inject arbitrary web script or HTML via the 1 titles of candidate referenced nodes in the Node reference...

CVE-2009-1069

Multiple cross-site scripting XSS vulnerabilities in the node edit form feature in Drupal Content Construction Kit CCK 6.x before 6.x-2.2, a module for Drupal, allow remote attackers to inject arbitrary web script or HTML via the 1 titles of candidate referenced nodes in the Node reference...

CVE-2009-1069

Drupal CCK for Drupal 6.x contains XSS in node and user reference sub-modules (node titles and user names on the node edit form). Root cause: insufficient filtering of candidate references, enabling injection of arbitrary script/HTML. Affected: Drupal Content Construction Kit (CCK) 6.x prior to 6...