CVE-2009-3919

Cross-site scripting XSS vulnerability in the NGP COO/CWP Integration crmngp module 6.x before 6.x-1.12 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified "user-supplied information."...

CVE-2009-3919

CVE-2009-3919 affects Drupal’s NGP COO/CWP Integration (crmngp) 6.x up to 6.x-1.12. It is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified user-supplied information. Remediation: upgrade to 6.x-1.12 or apply the officia...