CVE-2012-1624

The Drupal Lingotek module (6.x-1.x) is affected by XSS vulnerabilities in the content creation/editing workflow due to insufficient sanitization. Versions prior to Lingotek 6.x-1.40 allow remote authenticated users to inject arbitrary scripts/HTML when creating or editing node content. The issue...