CVE-2012-2082

Cross-site scripting XSS vulnerability in the Chaos tool suite aka CTools module 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with the post comments permission to inject arbitrary web script or HTML via a user signature...

CVE-2012-2082

The CVE-2012-2082 issue affects the Chaos Tool Suite (ctools) Drupal module 7.x-1.x prior to 7.x-1.0. The root cause is that the module did not properly filter user signatures when rendering comments, allowing remote authenticated users with the post comments permission to inject arbitrary web sc...

CVE-2012-2082

Cross-site scripting XSS vulnerability in the Chaos tool suite aka CTools module 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with the post comments permission to inject arbitrary web script or HTML via a user signature...