CVE-2011-0771

The CVE-2011-0771 entry concerns the Drupal module Janrain Engage (RPX) 6.x-1.3, which fails to validate the avatar/profile image file. This vulnerability allows remote authenticated users to perform cross-site scripting (XSS) and potentially execute arbitrary PHP code by triggering a crafted ava...