CVE-2012-1658

Cross-site scripting XSS vulnerability in the Read More Link module 6.x-3.x before 6.x-3.1 for Drupal allows remote authenticated users with the access administration pages permission to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-1658

The CVE-2012-1658 entry concerns a Cross-site scripting (XSS) vulnerability in the Drupal contributed Read More Link module (versions 6.x-3.x up to 6.x-3.0). The root cause is an XSS flaw that allows remote authenticated users with the access administration pages permission to inject arbitrary sc...

SA-CONTRIB-2012-033 - Read More Link - Cross Site Scripting

CVE: CVE-2012-1658 The Read More Link module allows you to move the "Read more" link from the node's links area to the end of the teaser text. A user could inject java script into pages affecting other site users. This vulnerability is mitigated by the fact that an attacker must have a role with...