CVE-2012-1639

CVE-2012-1639 describes multiple cross-site scripting (XSS) vulnerabilities in the Drupal Commerce module for Drupal, specifically in the file product/commerce_product.module. The issue affects Drupal Commerce 7.x-1.1 and allows remote authenticated users to inject arbitrary web script or HTML vi...