CVE-2009-3918

Cross-site scripting XSS vulnerability in the Zoomify module 5.x before 5.x-2.2 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via the node title...

CVE-2009-3918

The CVE applies to the Drupal Zoomify module. Affected versions are Zoomify 5.x before 5.x-2.2 and 6.x before 6.x-1.4. Root cause is a Cross-site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the node title. Impact, as stated, is that attack...