CVE-2012-2071

The CVE-2012-2071 entry affects the Drupal 6.x-1.x Contact Forms module (prior to 6.x-1.13) when the core contact form is enabled. The vulnerability is an XSS flaw that allows remote authenticated users with the administer site-wide contact form permission to inject arbitrary web script or HTML v...