CVE-2009-3917

The CVE-2009-3917 entry concerns the Drupal S5 Presentation Player module (6.x-1.x) prior to 6.x-1.1. The issue is a cross-site scripting (XSS) vulnerability where an unspecified field copied into the HTML HEAD element can be abused to inject arbitrary scripts or HTML. The description notes the a...