CVE-2012-1627

Cross-site scripting XSS vulnerability in vudterm.module in the Vote Up/Down module 6.x-2.x before 6.x-2.8 and 6.x-3.x before 6.x-3.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via taxonomy terms...

CVE-2012-1627

Vulnerability: CVE-2012-1627 affects the Drupal Vote Up/Down module (vud_term) 6.x-2.x before 6.x-2.8 and 6.x-3.x before 6.x-3.1. Description: the vud_term sub-module does not sufficiently sanitize taxonomy terms, allowing remote authenticated users to inject arbitrary script/HTML. Impact: XSS vi...